./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2198368710 <...> Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. execve("./syz-executor2198368710", ["./syz-executor2198368710"], 0x7ffc00666a00 /* 10 vars */) = 0 brk(NULL) = 0x55558827a000 brk(0x55558827ad00) = 0x55558827ad00 arch_prctl(ARCH_SET_FS, 0x55558827a380) = 0 set_tid_address(0x55558827a650) = 297 set_robust_list(0x55558827a660, 24) = 0 rseq(0x55558827aca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2198368710", 4096) = 28 getrandom("\xd6\x24\x0f\xff\xbd\xb7\xf5\x35", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558827ad00 brk(0x55558829bd00) = 0x55558829bd00 brk(0x55558829c000) = 0x55558829c000 mprotect(0x7f2290672000, 16384, PROT_READ) = 0 mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000 mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000 mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 [ 24.066663][ T28] audit: type=1400 audit(1739847878.386:66): avc: denied { execmem } for pid=297 comm="syz-executor219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.070903][ T297] cgroup: Unknown subsys name 'net' [ 24.086705][ T28] audit: type=1400 audit(1739847878.386:67): avc: denied { mounton } for pid=297 comm="syz-executor219" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) [ 24.113985][ T28] audit: type=1400 audit(1739847878.386:68): avc: denied { mount } for pid=297 comm="syz-executor219" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.114521][ T297] cgroup: Unknown subsys name 'devices' [ 24.136822][ T28] audit: type=1400 audit(1739847878.406:69): avc: denied { unmount } for pid=297 comm="syz-executor219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) [ 24.259255][ T297] cgroup: Unknown subsys name 'hugetlb' [ 24.264983][ T297] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 298 ./strace-static-x86_64: Process 298 attached [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] set_robust_list(0x55558827a660, 24) = 0 [pid 298] mkdir("./syzkaller.3n6CcC", 0700./strace-static-x86_64: Process 299 attached [pid 297] <... clone resumed>, child_tidptr=0x55558827a650) = 299 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... mkdir resumed>) = 0 [pid 298] chmod("./syzkaller.3n6CcC", 0777) = 0 [pid 298] chdir("./syzkaller.3n6CcC") = 0 [pid 298] unshare(CLONE_NEWPID [pid 297] <... clone resumed>, child_tidptr=0x55558827a650) = 300 [pid 299] set_robust_list(0x55558827a660, 24 [pid 298] <... unshare resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 300 attached [pid 298] <... clone resumed>, child_tidptr=0x55558827a650) = 301 ./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x55558827a660, 24) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] getppid() = 0 [pid 301] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 297] <... clone resumed>, child_tidptr=0x55558827a650) = 302 ./strace-static-x86_64: Process 302 attached [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... openat resumed>) = 3 [pid 300] set_robust_list(0x55558827a660, 24 [pid 299] mkdir("./syzkaller.I7vId2", 0700 [pid 297] <... clone resumed>, child_tidptr=0x55558827a650) = 303 [pid 299] <... mkdir resumed>) = 0 [pid 299] chmod("./syzkaller.I7vId2", 0777) = 0 [pid 299] chdir("./syzkaller.I7vId2") = 0 [pid 299] unshare(CLONE_NEWPID) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 304 [pid 300] <... set_robust_list resumed>) = 0 [pid 300] mkdir("./syzkaller.qJZYcu", 0700) = 0 [pid 300] chmod("./syzkaller.qJZYcu", 0777) = 0 [pid 300] chdir("./syzkaller.qJZYcu") = 0 [pid 300] unshare(CLONE_NEWPID) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 305 [pid 302] set_robust_list(0x55558827a660, 24) = 0 [pid 302] mkdir("./syzkaller.qShtdT", 0700 [pid 301] dup2(3, 201) = 201 [pid 301] close(3) = 0 [pid 301] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 301] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 301] unshare(CLONE_NEWNS) = 0 [pid 301] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] chmod("./syzkaller.qShtdT", 0777) = 0 [pid 302] chdir("./syzkaller.qShtdT") = 0 [pid 302] unshare(CLONE_NEWPID) = 0 [pid 301] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] unshare(CLONE_NEWCGROUP) = 0 [pid 301] unshare(CLONE_NEWUTS) = 0 [pid 301] unshare(CLONE_SYSVSEM) = 0 [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 305 attached ./strace-static-x86_64: Process 304 attached ./strace-static-x86_64: Process 303 attached [pid 302] <... clone resumed>, child_tidptr=0x55558827a650) = 306 [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] getpid() = 1 [pid 301] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 306] set_robust_list(0x55558827a660, 24) = 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 306] getppid() = 0 [pid 306] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 306] dup2(3, 201) = 201 [pid 306] close(3) = 0 [pid 306] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 306] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 306] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 306] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 306] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 306] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 306] unshare(CLONE_NEWNS) = 0 [pid 306] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 306] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 306] unshare(CLONE_NEWCGROUP) = 0 [pid 306] unshare(CLONE_NEWUTS) = 0 [pid 306] unshare(CLONE_SYSVSEM) = 0 [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] getpid() = 1 [pid 306] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 305] set_robust_list(0x55558827a660, 24 [pid 304] set_robust_list(0x55558827a660, 24 [pid 303] set_robust_list(0x55558827a660, 24 [pid 304] <... set_robust_list resumed>) = 0 [pid 303] <... set_robust_list resumed>) = 0 [pid 305] <... set_robust_list resumed>) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 303] mkdir("./syzkaller.BhlpDn", 0700 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] <... prctl resumed>) = 0 [pid 303] <... mkdir resumed>) = 0 [pid 305] <... prctl resumed>) = 0 [ 24.393236][ T28] audit: type=1400 audit(1739847878.706:70): avc: denied { read } for pid=301 comm="syz-executor219" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 24.414612][ T28] audit: type=1400 audit(1739847878.706:71): avc: denied { open } for pid=301 comm="syz-executor219" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [pid 304] getppid( [pid 303] chmod("./syzkaller.BhlpDn", 0777 [pid 305] getppid( [pid 304] <... getppid resumed>) = 0 [pid 303] <... chmod resumed>) = 0 [pid 305] <... getppid resumed>) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 303] chdir("./syzkaller.BhlpDn" [pid 305] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 304] <... openat resumed>) = 3 [pid 303] <... chdir resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 304] dup2(3, 201 [pid 305] dup2(3, 201 [pid 303] unshare(CLONE_NEWPID [pid 306] <... unshare resumed>) = 0 [pid 304] <... dup2 resumed>) = 201 [pid 305] <... dup2 resumed>) = 201 [pid 304] close(3 [pid 303] <... unshare resumed>) = 0 [pid 305] close(3 [pid 304] <... close resumed>) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... close resumed>) = 0 [pid 304] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 306] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 305] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 304] <... prlimit64 resumed>NULL) = 0 [pid 303] <... clone resumed>, child_tidptr=0x55558827a650) = 307 [pid 305] <... prlimit64 resumed>NULL) = 0 [pid 304] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 305] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 304] <... prlimit64 resumed>NULL) = 0 [pid 305] <... prlimit64 resumed>NULL) = 0 [pid 304] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 305] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 304] <... prlimit64 resumed>NULL) = 0 [pid 305] <... prlimit64 resumed>NULL) = 0 [pid 304] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 305] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 304] <... prlimit64 resumed>NULL) = 0 [pid 305] <... prlimit64 resumed>NULL) = 0 [pid 304] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 305] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 304] <... prlimit64 resumed>NULL) = 0 [pid 305] <... prlimit64 resumed>NULL) = 0 [pid 304] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 305] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 304] <... prlimit64 resumed>NULL) = 0 [pid 305] <... prlimit64 resumed>NULL) = 0 [pid 304] unshare(CLONE_NEWNS [pid 305] unshare(CLONE_NEWNS [pid 304] <... unshare resumed>) = 0 [pid 305] <... unshare resumed>) = 0 [pid 304] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 305] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 304] <... mount resumed>) = 0 [pid 305] <... mount resumed>) = 0 [pid 304] unshare(CLONE_NEWIPC [pid 305] unshare(CLONE_NEWIPC [pid 304] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 304] unshare(CLONE_NEWCGROUP [pid 305] unshare(CLONE_NEWCGROUP [pid 304] <... unshare resumed>) = 0 [pid 305] <... unshare resumed>) = 0 [pid 304] unshare(CLONE_NEWUTS [pid 305] unshare(CLONE_NEWUTS [pid 304] <... unshare resumed>) = 0 [pid 305] <... unshare resumed>) = 0 [pid 304] unshare(CLONE_SYSVSEM [pid 305] unshare(CLONE_SYSVSEM [pid 304] <... unshare resumed>) = 0 [pid 305] <... unshare resumed>) = 0 [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 305] getpid() = 1 [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 305] <... capget resumed>{effective=1<) = -1 ENOENT (No such file or directory) [pid 305] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 304] getpid( [pid 305] <... capset resumed>) = 0 [pid 304] <... getpid resumed>) = 1 [pid 305] unshare(CLONE_NEWNET [pid 304] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 306] <... openat resumed>) = 3 [pid 306] write(3, "0 65535", 7) = 7 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 304] <... capget resumed>{effective=1< [pid 306] write(3, "100000", 6) = 6 [pid 306] close(3) = 0 [pid 306] mkdir("./syz-tmp", 0777) = 0 [pid 306] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 306] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 306] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 306] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 ./strace-static-x86_64: Process 307 attached [pid 307] set_robust_list(0x55558827a660, 24) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 307] <... prctl resumed>) = 0 [pid 307] getppid() = 0 [pid 307] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 306] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 307] dup2(3, 201) = 201 [pid 307] close(3) = 0 [pid 307] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 307] unshare(CLONE_NEWNS) = 0 [pid 306] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 306] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 307] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 307] unshare(CLONE_NEWIPC [pid 306] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 307] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... mount resumed>) = 0 [pid 307] unshare(CLONE_NEWCGROUP) = 0 [pid 307] unshare(CLONE_NEWUTS) = 0 [pid 307] unshare(CLONE_SYSVSEM [pid 306] mkdir("./syz-tmp/newroot/sys", 0700 [pid 307] <... unshare resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 306] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 307] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 306] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 307] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] <... mount resumed>) = -1 ENOENT (No such file or directory) [ 24.438325][ T28] audit: type=1400 audit(1739847878.726:72): avc: denied { mounton } for pid=301 comm="syz-executor219" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 306] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 307] getpid() = 1 [pid 307] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 306] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 306] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 306] mkdir("./syz-tmp/newroot/syzcgroup", 0700) = 0 [pid 306] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700) = 0 [pid 306] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700) = 0 [pid 306] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700) = 0 [pid 306] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 306] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 306] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 306] mkdir("./syz-tmp/pivot", 0777 [pid 301] <... unshare resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 306] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 306] chdir("/") = 0 [pid 306] umount2("./pivot", MNT_DETACH) = 0 [pid 306] chroot("./newroot") = 0 [pid 306] chdir("/") = 0 [pid 306] mkdir("/dev/gadgetfs", 0777) = 0 [pid 306] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 301] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 306] <... mount resumed>) = -1 ENODEV (No such device) [pid 306] mkdir("/dev/binderfs", 0777 [pid 301] <... openat resumed>) = 3 [pid 301] write(3, "0 65535", 7) = 7 [pid 301] close(3) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 306] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 306] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 306] getpid() = 1 [pid 306] mkdir("/syzcgroup/unified/syz3", 0777) = 0 [pid 306] openat(AT_FDCWD, "/syzcgroup/unified/syz3/pids.max", O_WRONLY|O_CLOEXEC) = 3 [pid 306] write(3, "32", 2) = 2 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/syzcgroup/unified/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 304] <... unshare resumed>) = 0 [pid 301] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 304] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = 3 [pid 304] <... openat resumed>) = 3 [pid 301] write(3, "100000", 6 [pid 304] write(3, "0 65535", 7 [pid 301] <... write resumed>) = 6 [pid 304] <... write resumed>) = 7 [pid 301] close(3 [pid 304] close(3 [pid 301] <... close resumed>) = 0 [pid 304] <... close resumed>) = 0 [pid 301] mkdir("./syz-tmp", 0777 [pid 306] <... openat resumed>) = 3 [pid 304] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 301] <... mkdir resumed>) = 0 [pid 304] <... openat resumed>) = 3 [pid 301] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 306] write(3, "1", 1 [pid 301] <... mount resumed>) = 0 [pid 304] write(3, "100000", 6 [pid 301] mkdir("./syz-tmp/newroot", 0777 [pid 304] <... write resumed>) = 6 [pid 301] <... mkdir resumed>) = 0 [pid 304] close(3 [pid 301] mkdir("./syz-tmp/newroot/dev", 0700 [pid 304] <... close resumed>) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 304] mkdir("./syz-tmp", 0777 [pid 301] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 301] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 304] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 301] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 301] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 304] <... mount resumed>) = 0 [pid 304] mkdir("./syz-tmp/newroot", 0777 [pid 301] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 304] <... mkdir resumed>) = 0 [pid 301] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] <... unshare resumed>) = 0 [pid 304] mkdir("./syz-tmp/newroot/dev", 0700 [pid 301] <... mount resumed>) = 0 [pid 306] <... write resumed>) = 1 [ 24.474616][ T28] audit: type=1400 audit(1739847878.786:73): avc: denied { mounton } for pid=306 comm="syz-executor219" path="/root/syzkaller.qShtdT/syz-tmp" dev="sda1" ino=1935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 24.508432][ T306] request_module fs-gadgetfs succeeded, but still no fs? [pid 306] close(3) = 0 [pid 306] mkdir("/syzcgroup/cpu/syz3", 0777 [pid 305] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 304] <... mkdir resumed>) = 0 [pid 301] mkdir("./syz-tmp/newroot/sys", 0700 [pid 307] <... unshare resumed>) = 0 [pid 307] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 305] <... openat resumed>) = 3 [pid 304] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... mkdir resumed>) = 0 [pid 305] write(3, "0 65535", 7 [pid 304] <... mount resumed>) = 0 [pid 301] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] <... write resumed>) = 7 [pid 304] mkdir("./syz-tmp/newroot/proc", 0700 [pid 307] <... openat resumed>) = 3 [pid 307] write(3, "0 65535", 7) = 7 [pid 306] <... mkdir resumed>) = 0 [pid 305] close(3 [pid 301] <... mount resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 301] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 307] close(3 [pid 306] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 304] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 305] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 301] <... mount resumed>) = 0 [pid 305] write(3, "100000", 6) = 6 [pid 305] close(3 [pid 304] <... mount resumed>) = 0 [pid 301] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] <... close resumed>) = 0 [pid 305] mkdir("./syz-tmp", 0777 [pid 306] <... openat resumed>) = 3 [pid 304] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 301] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 307] <... close resumed>) = 0 [pid 306] write(3, "1", 1 [pid 304] <... mkdir resumed>) = 0 [pid 301] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 306] <... write resumed>) = 1 [pid 305] <... mkdir resumed>) = 0 [pid 304] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... mount resumed>) = 0 [pid 307] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 306] close(3 [pid 304] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 301] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 306] <... close resumed>) = 0 [pid 304] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 304] <... mount resumed>) = 0 [pid 301] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 306] <... openat resumed>) = 3 [pid 305] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 304] mkdir("./syz-tmp/newroot/sys", 0700 [pid 301] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 306] write(3, "313524224", 9 [pid 304] <... mkdir resumed>) = 0 [pid 301] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 306] <... write resumed>) = 9 [pid 304] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... mkdir resumed>) = 0 [pid 306] close(3 [pid 304] <... mount resumed>) = 0 [pid 301] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 305] <... mount resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 304] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 304] <... mount resumed>) = 0 [pid 301] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 306] <... openat resumed>) = 3 [pid 304] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... mkdir resumed>) = 0 [pid 305] mkdir("./syz-tmp/newroot", 0777 [pid 306] write(3, "314572800", 9 [pid 304] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 301] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 306] <... write resumed>) = 9 [pid 304] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... mkdir resumed>) = 0 [pid 306] close(3 [pid 304] <... mount resumed>) = 0 [pid 301] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 306] <... close resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 304] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 301] <... mount resumed>) = 0 [pid 306] mkdir("/syzcgroup/net/syz3", 0777 [pid 305] mkdir("./syz-tmp/newroot/dev", 0700 [pid 304] <... mkdir resumed>) = 0 [pid 301] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 307] <... openat resumed>) = 3 [pid 305] <... mkdir resumed>) = 0 [pid 304] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... mount resumed>) = 0 [pid 307] write(3, "100000", 6 [pid 306] <... mkdir resumed>) = 0 [pid 305] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 307] <... write resumed>) = 6 [pid 306] openat(AT_FDCWD, "/syzcgroup/net/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 304] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 301] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] <... mount resumed>) = 0 [pid 304] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 306] <... openat resumed>) = 3 [pid 305] mkdir("./syz-tmp/newroot/proc", 0700 [pid 306] write(3, "1", 1 [pid 305] <... mkdir resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 301] <... mount resumed>) = 0 [pid 305] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 306] <... write resumed>) = 1 [pid 305] <... mount resumed>) = 0 [pid 304] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 301] mkdir("./syz-tmp/pivot", 0777 [pid 307] close(3 [pid 305] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 306] close(3 [pid 305] <... mkdir resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 305] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 304] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 301] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 306] mkdir("./0", 0777 [pid 305] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 304] <... mkdir resumed>) = 0 [pid 305] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 306] <... mkdir resumed>) = 0 [pid 305] <... mount resumed>) = 0 [pid 304] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 301] <... pivot_root resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 301] chdir("/" [pid 305] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 305] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55558827a650) = 2 [pid 305] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 304] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... chdir resumed>) = 0 [pid 305] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 305] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 307] <... close resumed>) = 0 [pid 305] <... mount resumed>) = 0 [pid 304] <... mount resumed>) = 0 [pid 301] umount2("./pivot", MNT_DETACH./strace-static-x86_64: Process 308 attached [pid 305] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 304] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 308] set_robust_list(0x55558827a660, 24 [pid 305] <... mkdir resumed>) = 0 [pid 305] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... umount2 resumed>) = 0 [pid 308] <... set_robust_list resumed>) = 0 [pid 305] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 304] <... mount resumed>) = 0 [pid 301] chroot("./newroot" [pid 305] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 308] chdir("./0" [pid 305] <... mkdir resumed>) = 0 [pid 304] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... chroot resumed>) = 0 [pid 308] <... chdir resumed>) = 0 [pid 305] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... mkdir resumed>) = 0 [pid 304] <... mount resumed>) = 0 [pid 301] chdir("/" [pid 308] <... prctl resumed>) = 0 [pid 307] mkdir("./syz-tmp", 0777 [pid 305] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 304] mkdir("./syz-tmp/pivot", 0777 [pid 308] setpgid(0, 0 [pid 305] <... mkdir resumed>) = 0 [pid 301] <... chdir resumed>) = 0 [pid 305] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 304] <... mkdir resumed>) = 0 [pid 308] <... setpgid resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 304] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 301] mkdir("/dev/gadgetfs", 0777 [pid 305] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 308] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 305] <... mount resumed>) = 0 [pid 301] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 305] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 304] <... pivot_root resumed>) = 0 [pid 305] <... mount resumed>) = 0 [pid 305] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 308] <... symlink resumed>) = 0 [pid 305] <... mount resumed>) = 0 [pid 304] chdir("/" [pid 301] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 308] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 305] mkdir("./syz-tmp/pivot", 0777 [pid 304] <... chdir resumed>) = 0 [pid 308] <... symlink resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 304] umount2("./pivot", MNT_DETACH [pid 301] <... mount resumed>) = -1 ENODEV (No such device) [pid 307] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 308] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 305] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 301] mkdir("/dev/binderfs", 0777 [pid 308] <... symlink resumed>) = 0 [pid 305] <... pivot_root resumed>) = 0 [pid 304] <... umount2 resumed>) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] chdir("/" [pid 304] chroot("./newroot" [pid 301] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 305] <... chdir resumed>) = 0 [pid 301] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 305] umount2("./pivot", MNT_DETACH [pid 304] <... chroot resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 305] chroot("./newroot") = 0 [pid 308] <... openat resumed>) = 3 [pid 305] chdir("/" [pid 304] chdir("/" [pid 305] <... chdir resumed>) = 0 [pid 305] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists) [pid 305] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 308] write(3, "1000", 4 [pid 305] <... mount resumed>) = -1 ENODEV (No such device) [pid 304] <... chdir resumed>) = 0 [pid 301] <... mount resumed>) = 0 [pid 308] <... write resumed>) = 4 [pid 307] <... mount resumed>) = 0 [pid 305] mkdir("/dev/binderfs", 0777 [pid 304] mkdir("/dev/gadgetfs", 0777 [pid 308] close(3 [pid 307] mkdir("./syz-tmp/newroot", 0777 [pid 305] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 301] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 305] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 304] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 308] <... close resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 305] <... mount resumed>) = 0 [pid 301] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 308] symlink("/dev/binderfs", "./binderfs" [pid 305] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 304] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 301] getpid( [pid 308] <... symlink resumed>) = 0 [pid 307] mkdir("./syz-tmp/newroot/dev", 0700 [pid 305] <... mount resumed>) = -1 EBUSY (Device or resource busy) executing program [pid 304] <... mount resumed>) = -1 ENODEV (No such device) [pid 301] <... getpid resumed>) = 1 [pid 308] write(1, "executing program\n", 18 [pid 305] getpid( [pid 304] mkdir("/dev/binderfs", 0777 [pid 301] mkdir("/syzcgroup/unified/syz0", 0777 [pid 308] <... write resumed>) = 18 [pid 307] <... mkdir resumed>) = 0 [pid 305] <... getpid resumed>) = 1 [pid 304] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 305] mkdir("/syzcgroup/unified/syz2", 0777 [pid 308] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 307] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] <... mkdir resumed>) = 0 [pid 304] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 301] <... mkdir resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 305] openat(AT_FDCWD, "/syzcgroup/unified/syz2/pids.max", O_WRONLY|O_CLOEXEC [pid 304] <... mount resumed>) = 0 [pid 301] openat(AT_FDCWD, "/syzcgroup/unified/syz0/pids.max", O_WRONLY|O_CLOEXEC [pid 308] setns(201, 0 [pid 307] <... mount resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 304] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 301] <... openat resumed>) = 3 [pid 308] <... setns resumed>) = 0 [pid 307] mkdir("./syz-tmp/newroot/proc", 0700 [pid 305] write(3, "32", 2 [pid 304] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 301] write(3, "32", 2 [pid 308] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 307] <... mkdir resumed>) = 0 [pid 305] <... write resumed>) = 2 [pid 304] getpid( [pid 301] <... write resumed>) = 2 [pid 308] <... socket resumed>) = 4 [pid 307] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 305] close(3 [pid 304] <... getpid resumed>) = 1 [pid 301] close(3 [pid 308] setns(3, 0 [pid 307] <... mount resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 304] mkdir("/syzcgroup/unified/syz1", 0777 [pid 301] <... close resumed>) = 0 [pid 308] <... setns resumed>) = 0 [pid 307] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 305] openat(AT_FDCWD, "/syzcgroup/unified/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 304] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/syzcgroup/unified/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 308] close(3 [pid 305] <... openat resumed>) = 3 [pid 304] openat(AT_FDCWD, "/syzcgroup/unified/syz1/pids.max", O_WRONLY|O_CLOEXEC [pid 308] <... close resumed>) = 0 [pid 305] write(3, "1", 1 [pid 301] <... openat resumed>) = 3 [pid 305] <... write resumed>) = 1 [pid 304] <... openat resumed>) = 3 [pid 308] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 305] close(3 [pid 304] write(3, "32", 2 [pid 301] write(3, "1", 1 [pid 307] <... mkdir resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 305] mkdir("/syzcgroup/cpu/syz2", 0777 [pid 308] <... openat resumed>) = 3 [pid 307] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 304] <... write resumed>) = 2 [pid 301] <... write resumed>) = 1 [pid 308] ioctl(3, TIOCSETD, [15] [pid 307] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 305] <... mkdir resumed>) = 0 [pid 304] close(3 [pid 301] close(3 [pid 308] <... ioctl resumed>) = 0 [pid 307] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 304] <... close resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 308] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 307] <... mount resumed>) = 0 [pid 304] openat(AT_FDCWD, "/syzcgroup/unified/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 301] mkdir("/syzcgroup/cpu/syz0", 0777 [pid 308] <... ioctl resumed>, 0x4) = 0 [pid 307] mkdir("./syz-tmp/newroot/sys", 0700 [pid 305] <... openat resumed>) = 3 [pid 304] <... openat resumed>) = 3 [pid 301] <... mkdir resumed>) = 0 [pid 308] ioctl(4, HCISETLINKPOL [pid 307] <... mkdir resumed>) = 0 [pid 304] write(3, "1", 1 [pid 301] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 307] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 304] <... write resumed>) = 1 [pid 301] <... openat resumed>) = 3 [pid 307] <... mount resumed>) = 0 [pid 304] close(3 [pid 301] write(3, "1", 1 [pid 307] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 304] <... close resumed>) = 0 [pid 301] <... write resumed>) = 1 [pid 307] <... mount resumed>) = 0 [pid 304] mkdir("/syzcgroup/cpu/syz1", 0777 [pid 301] close(3 [pid 307] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] write(3, "1", 1 [pid 304] <... mkdir resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 307] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [ 24.538395][ T28] audit: type=1400 audit(1739847878.796:74): avc: denied { mount } for pid=306 comm="syz-executor219" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 24.560604][ T28] audit: type=1400 audit(1739847878.796:75): avc: denied { mounton } for pid=306 comm="syz-executor219" path="/root/syzkaller.qShtdT/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [pid 301] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 307] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] <... write resumed>) = 1 [pid 304] <... openat resumed>) = 3 [pid 301] <... openat resumed>) = 3 [pid 307] <... mount resumed>) = 0 [pid 305] close(3 [pid 304] write(3, "1", 1 [pid 301] write(3, "313524224", 9 [pid 307] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 305] <... close resumed>) = 0 [pid 304] <... write resumed>) = 1 [pid 301] <... write resumed>) = 9 [pid 307] <... mkdir resumed>) = 0 [pid 305] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 304] close(3 [pid 301] close(3 [pid 307] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 304] <... close resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 307] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 305] <... openat resumed>) = 3 [pid 304] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 301] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 307] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 305] write(3, "313524224", 9 [pid 304] <... openat resumed>) = 3 [pid 301] <... openat resumed>) = 3 [pid 307] <... mkdir resumed>) = 0 [pid 305] <... write resumed>) = 9 [pid 304] write(3, "313524224", 9 [pid 301] write(3, "314572800", 9 [pid 307] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 305] close(3 [pid 304] <... write resumed>) = 9 [pid 301] <... write resumed>) = 9 [pid 307] <... mkdir resumed>) = 0 [pid 304] close(3 [pid 301] close(3 [pid 307] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 305] <... close resumed>) = 0 [pid 304] <... close resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 304] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 301] mkdir("/syzcgroup/net/syz0", 0777 [pid 307] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 305] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 304] <... openat resumed>) = 3 [pid 301] <... mkdir resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 304] write(3, "314572800", 9 [pid 301] openat(AT_FDCWD, "/syzcgroup/net/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 307] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] <... openat resumed>) = 3 [pid 304] <... write resumed>) = 9 [pid 301] <... openat resumed>) = 3 [pid 307] <... mount resumed>) = 0 [pid 304] close(3 [pid 301] write(3, "1", 1 [pid 307] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] write(3, "314572800", 9 [pid 304] <... close resumed>) = 0 [pid 301] <... write resumed>) = 1 [pid 307] <... mount resumed>) = 0 [pid 305] <... write resumed>) = 9 [pid 304] mkdir("/syzcgroup/net/syz1", 0777 [pid 301] close(3 [pid 307] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] close(3 [pid 307] <... mount resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 307] mkdir("./syz-tmp/pivot", 0777 [pid 305] mkdir("/syzcgroup/net/syz2", 0777 [pid 304] openat(AT_FDCWD, "/syzcgroup/net/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 301] mkdir("./0", 0777 [pid 307] <... mkdir resumed>) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 307] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... pivot_root resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 304] <... openat resumed>) = 3 ./strace-static-x86_64: Process 312 attached [pid 307] chdir("/" [pid 305] openat(AT_FDCWD, "/syzcgroup/net/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 304] write(3, "1", 1 [pid 301] <... clone resumed>, child_tidptr=0x55558827a650) = 2 [pid 312] set_robust_list(0x55558827a660, 24 [pid 307] <... chdir resumed>) = 0 [pid 312] <... set_robust_list resumed>) = 0 [pid 307] umount2("./pivot", MNT_DETACH [pid 305] <... openat resumed>) = 3 [pid 312] chdir("./0" [pid 307] <... umount2 resumed>) = 0 [pid 305] write(3, "1", 1 [pid 304] <... write resumed>) = 1 [pid 312] <... chdir resumed>) = 0 [pid 307] chroot("./newroot" [pid 304] close(3 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] <... chroot resumed>) = 0 [pid 305] <... write resumed>) = 1 [pid 312] <... prctl resumed>) = 0 [pid 307] chdir("/" [pid 304] <... close resumed>) = 0 [pid 305] close(3 [pid 312] setpgid(0, 0 [pid 307] <... chdir resumed>) = 0 [pid 304] mkdir("./0", 0777 [pid 312] <... setpgid resumed>) = 0 [pid 307] mkdir("/dev/gadgetfs", 0777 [pid 305] <... close resumed>) = 0 [pid 307] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 304] <... mkdir resumed>) = 0 [pid 307] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 312] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 307] <... mount resumed>) = -1 ENODEV (No such device) [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] mkdir("/dev/binderfs", 0777 [pid 305] mkdir("./0", 0777 [pid 312] <... symlink resumed>) = 0 [pid 307] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 307] mount("binder", "/dev/binderfs", "binder", 0, NULL./strace-static-x86_64: Process 313 attached ) = 0 [pid 312] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 307] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 305] <... mkdir resumed>) = 0 [pid 313] set_robust_list(0x55558827a660, 24 [pid 312] <... symlink resumed>) = 0 [pid 307] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] <... clone resumed>, child_tidptr=0x55558827a650) = 2 [pid 313] <... set_robust_list resumed>) = 0 [pid 312] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 307] getpid() = 1 [pid 307] mkdir("/syzcgroup/unified/syz4", 0777./strace-static-x86_64: Process 314 attached ) = 0 [pid 312] <... symlink resumed>) = 0 [pid 307] openat(AT_FDCWD, "/syzcgroup/unified/syz4/pids.max", O_WRONLY|O_CLOEXEC [pid 314] set_robust_list(0x55558827a660, 24 [pid 313] chdir("./0" [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] <... openat resumed>) = 3 [pid 305] <... clone resumed>, child_tidptr=0x55558827a650) = 2 [pid 314] <... set_robust_list resumed>) = 0 [pid 313] <... chdir resumed>) = 0 [pid 307] write(3, "32", 2 [pid 312] <... openat resumed>) = 3 [pid 307] <... write resumed>) = 2 [pid 307] close(3 [pid 314] chdir("./0" [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 312] write(3, "1000", 4 [pid 307] <... close resumed>) = 0 [pid 314] <... chdir resumed>) = 0 [pid 313] <... prctl resumed>) = 0 [pid 312] <... write resumed>) = 4 [pid 307] openat(AT_FDCWD, "/syzcgroup/unified/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 313] setpgid(0, 0 [pid 312] close(3 [pid 307] <... openat resumed>) = 3 [pid 314] <... prctl resumed>) = 0 [pid 313] <... setpgid resumed>) = 0 [pid 312] <... close resumed>) = 0 [pid 307] write(3, "1", 1 [pid 314] setpgid(0, 0 [pid 313] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 312] symlink("/dev/binderfs", "./binderfs" [pid 314] <... setpgid resumed>) = 0 [pid 313] <... symlink resumed>) = 0 [pid 312] <... symlink resumed>) = 0 [pid 307] <... write resumed>) = 1 [pid 314] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 313] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu"executing program [pid 312] write(1, "executing program\n", 18 [pid 314] <... symlink resumed>) = 0 [pid 307] close(3 [pid 314] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 313] <... symlink resumed>) = 0 [pid 312] <... write resumed>) = 18 [pid 307] <... close resumed>) = 0 [pid 314] <... symlink resumed>) = 0 [pid 313] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 312] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 307] mkdir("/syzcgroup/cpu/syz4", 0777 [pid 314] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 313] <... symlink resumed>) = 0 [pid 312] <... openat resumed>) = 3 [pid 314] <... symlink resumed>) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 312] setns(201, 0 [pid 307] <... mkdir resumed>) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 314] <... openat resumed>) = 3 [pid 313] <... openat resumed>) = 3 [pid 312] <... setns resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 314] write(3, "1000", 4 [pid 313] write(3, "1000", 4 [pid 312] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 307] write(3, "1", 1 [pid 314] <... write resumed>) = 4 [pid 313] <... write resumed>) = 4 [pid 312] <... socket resumed>) = 4 [pid 307] <... write resumed>) = 1 [pid 314] close(3 [pid 313] close(3 [pid 312] setns(3, 0 [pid 307] close(3 [pid 314] <... close resumed>) = 0 [pid 313] <... close resumed>) = 0 [pid 312] <... setns resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 314] symlink("/dev/binderfs", "./binderfs" [pid 313] symlink("/dev/binderfs", "./binderfs" [pid 312] close(3 [pid 307] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 314] <... symlink resumed>) = 0 [pid 312] <... close resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 314] write(1, "executing program\n", 18 [pid 313] <... symlink resumed>) = 0 [pid 307] write(3, "313524224", 9executing program executing program [pid 314] <... write resumed>) = 18 [pid 313] write(1, "executing program\n", 18 [pid 312] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 307] <... write resumed>) = 9 [pid 314] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 313] <... write resumed>) = 18 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 312] <... openat resumed>) = 3 [pid 307] <... openat resumed>) = 3 [pid 314] <... openat resumed>) = 3 [pid 313] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 312] ioctl(3, TIOCSETD, [15] [pid 307] write(3, "314572800", 9 [pid 314] setns(201, 0 [pid 307] <... write resumed>) = 9 [pid 313] <... openat resumed>) = 3 [pid 307] close(3 [pid 314] <... setns resumed>) = 0 [pid 313] setns(201, 0 [pid 312] <... ioctl resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 314] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 313] <... setns resumed>) = 0 [pid 312] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 307] mkdir("/syzcgroup/net/syz4", 0777 [pid 314] <... socket resumed>) = 4 [pid 313] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 312] <... ioctl resumed>, 0x4) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 307] openat(AT_FDCWD, "/syzcgroup/net/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "1", 1) = 1 [pid 307] close(3) = 0 [pid 307] mkdir("./0", 0777) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 2 [pid 314] setns(3, 0) = 0 [pid 314] close(3) = 0 [pid 314] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 314] ioctl(3, TIOCSETD, [15]) = 0 [pid 314] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4)./strace-static-x86_64: Process 316 attached , 0x4) = 0 [pid 313] <... socket resumed>) = 4 [pid 312] ioctl(4, HCISETLINKPOL [pid 316] set_robust_list(0x55558827a660, 24 [pid 313] setns(3, 0 [pid 316] <... set_robust_list resumed>) = 0 [pid 313] <... setns resumed>) = 0 [pid 316] chdir("./0" [pid 314] ioctl(4, HCISETLINKPOL [pid 313] close(3 [pid 316] <... chdir resumed>) = 0 [pid 313] <... close resumed>) = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 313] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 316] <... prctl resumed>) = 0 [pid 313] <... openat resumed>) = 3 [pid 316] setpgid(0, 0 [pid 313] ioctl(3, TIOCSETD, [15] [pid 316] <... setpgid resumed>) = 0 [pid 313] <... ioctl resumed>) = 0 [pid 316] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 313] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 316] <... symlink resumed>) = 0 [pid 316] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 313] <... ioctl resumed>, 0x4) = 0 [pid 316] <... symlink resumed>) = 0 [pid 313] ioctl(4, HCISETLINKPOL [pid 316] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 [pid 316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 316] write(1, "executing program\n", 18) = 18 [pid 316] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 316] setns(201, 0) = 0 [pid 316] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 316] setns(3, 0) = 0 [pid 316] close(3) = 0 [pid 316] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 316] ioctl(3, TIOCSETD, [15]) = 0 [pid 316] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 316] ioctl(4, HCISETLINKPOLexecuting program [ 24.640133][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 24.650576][ T43] Bluetooth: hci2: Frame reassembly failed (-84) [ 24.658864][ T43] Bluetooth: hci3: Frame reassembly failed (-84) [ 24.661413][ T8] Bluetooth: hci4: Frame reassembly failed (-84) [pid 308] <... ioctl resumed>, 0x400000000300) = -1 ETIMEDOUT (Connection timed out) [ 26.674518][ T309] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 26.674530][ T320] Bluetooth: hci4: command 0x1003 tx timeout [ 26.674554][ T320] Bluetooth: hci2: command 0x1003 tx timeout [ 26.680515][ T309] Bluetooth: hci1: command 0x1003 tx timeout [ 26.686276][ T317] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 26.692055][ T315] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 26.698508][ T311] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 26.709742][ T308] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 26.721946][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [pid 308] close(3) = 0 [pid 308] close(4) = 0 [pid 308] close(5) = -1 EBADF (Bad file descriptor) [pid 308] close(6) = -1 EBADF (Bad file descriptor) [pid 308] close(7) = -1 EBADF (Bad file descriptor) [pid 308] close(8) = -1 EBADF (Bad file descriptor) [pid 308] close(9) = -1 EBADF (Bad file descriptor) [pid 308] close(10) = -1 EBADF (Bad file descriptor) [pid 308] close(11) = -1 EBADF (Bad file descriptor) [pid 308] close(12) = -1 EBADF (Bad file descriptor) [pid 308] close(13) = -1 EBADF (Bad file descriptor) [pid 308] close(14) = -1 EBADF (Bad file descriptor) [pid 308] close(15) = -1 EBADF (Bad file descriptor) [pid 308] close(16) = -1 EBADF (Bad file descriptor) [pid 308] close(17) = -1 EBADF (Bad file descriptor) [pid 308] close(18) = -1 EBADF (Bad file descriptor) [pid 308] close(19) = -1 EBADF (Bad file descriptor) [pid 308] close(20) = -1 EBADF (Bad file descriptor) [pid 308] close(21) = -1 EBADF (Bad file descriptor) [pid 308] close(22) = -1 EBADF (Bad file descriptor) [pid 308] close(23) = -1 EBADF (Bad file descriptor) [pid 308] close(24) = -1 EBADF (Bad file descriptor) [pid 308] close(25) = -1 EBADF (Bad file descriptor) [pid 308] close(26) = -1 EBADF (Bad file descriptor) [pid 308] close(27) = -1 EBADF (Bad file descriptor) [pid 308] close(28) = -1 EBADF (Bad file descriptor) [pid 308] close(29) = -1 EBADF (Bad file descriptor) [pid 308] exit_group(0) = ? [pid 308] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 306] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 306] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./0/binderfs") = 0 [pid 306] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./0/cgroup.net") = 0 [pid 306] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./0/cgroup.cpu") = 0 [pid 306] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./0/cgroup") = 0 [pid 306] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./0") = 0 [pid 306] mkdir("./1", 0777) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x55558827a660, 24 [pid 306] <... clone resumed>, child_tidptr=0x55558827a650) = 3 [pid 328] <... set_robust_list resumed>) = 0 [pid 328] chdir("./1") = 0 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 328] setpgid(0, 0) = 0 [pid 328] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 328] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 328] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 328] write(3, "1000", 4) = 4 [pid 328] close(3) = 0 [pid 328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 328] write(1, "executing program\n", 18executing program ) = 18 [pid 328] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 328] setns(201, 0) = 0 [pid 328] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 328] setns(3, 0) = 0 [pid 328] close(3) = 0 [pid 328] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 328] ioctl(3, TIOCSETD, [15]) = 0 [pid 328] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 328] ioctl(4, HCISETLINKPOL, 0x400000000300) = -1 ENODEV (No such device) [ 28.764510][ T315] Bluetooth: hci0: command 0x080f tx timeout [ 28.764530][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.770411][ T315] Bluetooth: hci0: sending frame failed (-49) [ 28.795769][ T10] Bluetooth: hci5: Frame reassembly failed (-84) [pid 328] close(3 [pid 301] kill(-2, SIGKILL) = 0 [pid 301] kill(2, SIGKILL) = 0 [pid 312] <... ioctl resumed> ) = ? [pid 305] kill(-2, SIGKILL [pid 304] kill(-2, SIGKILL) = 0 [pid 304] kill(2, SIGKILL) = 0 [pid 305] <... kill resumed>) = 0 [pid 305] kill(2, SIGKILL) = 0 [pid 314] <... ioctl resumed> ) = ? [pid 313] <... ioctl resumed> ) = ? [pid 307] kill(-2, SIGKILL) = 0 [pid 307] kill(2, SIGKILL) = 0 [pid 316] <... ioctl resumed> ) = ? [pid 312] +++ killed by SIGKILL +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 301] restart_syscall(<... resuming interrupted kill ...>) = 0 [pid 301] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 301] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./0/binderfs") = 0 [pid 301] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./0/cgroup.net") = 0 [pid 301] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./0/cgroup.cpu") = 0 [pid 301] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./0/cgroup") = 0 [pid 301] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./0") = 0 [pid 301] mkdir("./1", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 330 attached , child_tidptr=0x55558827a650) = 3 [pid 330] set_robust_list(0x55558827a660, 24) = 0 [pid 330] chdir("./1") = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 330] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 330] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3) = 0 [pid 330] symlink("/dev/binderfs", "./binderfs") = 0 [pid 330] write(1, "executing program\n", 18executing program ) = 18 [pid 330] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 330] setns(201, 0) = 0 [pid 330] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 330] setns(3, 0) = 0 [pid 330] close(3) = 0 [pid 330] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 330] ioctl(3, TIOCSETD, [15]) = 0 [pid 330] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [ 29.626911][ T312] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 29.636850][ T314] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 29.642681][ T313] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 29.649825][ T316] Bluetooth: hci0: Opcode 0x080f failed: -4 [pid 330] ioctl(4, HCISETLINKPOL [pid 314] +++ killed by SIGKILL +++ [pid 313] +++ killed by SIGKILL +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 305] restart_syscall(<... resuming interrupted kill ...> [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 305] <... restart_syscall resumed>) = 0 [pid 305] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 305] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 305] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./0/binderfs", [pid 304] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./0/binderfs" [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... unlink resumed>) = 0 [pid 305] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 304] <... openat resumed>) = 3 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] newfstatat(3, "", [pid 305] unlink("./0/cgroup.net" [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 305] <... unlink resumed>) = 0 [pid 305] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] getdents64(3, [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] unlink("./0/cgroup.cpu" [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... unlink resumed>) = 0 [pid 304] newfstatat(AT_FDCWD, "./0/binderfs", [pid 305] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] newfstatat(AT_FDCWD, "./0/cgroup", [pid 304] unlink("./0/binderfs" [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] <... unlink resumed>) = 0 [pid 305] unlink("./0/cgroup" [pid 304] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... unlink resumed>) = 0 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] getdents64(3, [pid 304] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] close(3 [pid 304] unlink("./0/cgroup.net" [pid 305] <... close resumed>) = 0 [pid 304] <... unlink resumed>) = 0 [pid 305] rmdir("./0" [pid 304] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... rmdir resumed>) = 0 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] mkdir("./1", 0777 [pid 304] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 305] <... mkdir resumed>) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] unlink("./0/cgroup.cpu"./strace-static-x86_64: Process 331 attached ) = 0 [pid 305] <... clone resumed>, child_tidptr=0x55558827a650) = 3 [pid 331] set_robust_list(0x55558827a660, 24 [pid 304] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 331] <... set_robust_list resumed>) = 0 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 331] chdir("./1" [pid 304] newfstatat(AT_FDCWD, "./0/cgroup", [pid 331] <... chdir resumed>) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] unlink("./0/cgroup" [pid 331] <... prctl resumed>) = 0 [pid 304] <... unlink resumed>) = 0 [pid 331] setpgid(0, 0 [pid 304] getdents64(3, [pid 331] <... setpgid resumed>) = 0 [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 331] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 304] close(3 [pid 331] <... symlink resumed>) = 0 [pid 304] <... close resumed>) = 0 [pid 331] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 304] rmdir("./0" [pid 331] <... symlink resumed>) = 0 [pid 304] <... rmdir resumed>) = 0 [pid 331] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 304] mkdir("./1", 0777 [pid 331] <... symlink resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 331] <... openat resumed>) = 3 [pid 331] write(3, "1000", 4./strace-static-x86_64: Process 332 attached ) = 4 [pid 332] set_robust_list(0x55558827a660, 24 [pid 331] close(3 [pid 304] <... clone resumed>, child_tidptr=0x55558827a650) = 3 [pid 332] <... set_robust_list resumed>) = 0 [pid 331] <... close resumed>) = 0 [pid 332] chdir("./1" [pid 331] symlink("/dev/binderfs", "./binderfs" [pid 332] <... chdir resumed>) = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 331] <... symlink resumed>) = 0 [pid 332] <... prctl resumed>) = 0 executing program [pid 331] write(1, "executing program\n", 18 [pid 332] setpgid(0, 0 [pid 331] <... write resumed>) = 18 [pid 332] <... setpgid resumed>) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 332] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 331] <... openat resumed>) = 3 [pid 332] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 331] setns(201, 0 [pid 332] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 331] <... setns resumed>) = 0 [pid 332] <... symlink resumed>) = 0 [pid 331] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 331] <... socket resumed>) = 4 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3 [pid 331] setns(3, 0 [pid 332] <... close resumed>) = 0 [pid 332] symlink("/dev/binderfs", "./binderfs") = 0 [pid 331] <... setns resumed>) = 0 executing program [pid 332] write(1, "executing program\n", 18) = 18 [pid 331] close(3 [pid 332] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 331] <... close resumed>) = 0 [pid 332] setns(201, 0) = 0 [pid 332] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 331] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 332] setns(3, 0) = 0 [pid 332] close(3) = 0 [pid 331] <... openat resumed>) = 3 [pid 332] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 331] ioctl(3, TIOCSETD, [15] [pid 332] <... openat resumed>) = 3 [pid 332] ioctl(3, TIOCSETD, [15]) = 0 [pid 331] <... ioctl resumed>) = 0 [pid 332] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [ 29.671817][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [pid 331] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 332] <... ioctl resumed>, 0x4) = 0 [pid 331] <... ioctl resumed>, 0x4) = 0 [pid 332] ioctl(4, HCISETLINKPOL [pid 331] ioctl(4, HCISETLINKPOL [pid 316] +++ killed by SIGKILL +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=2, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 307] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 307] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 307] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./0/binderfs") = 0 [pid 307] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./0/cgroup.net") = 0 [pid 307] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./0/cgroup.cpu") = 0 [pid 307] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./0/cgroup") = 0 [pid 307] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./0") = 0 [pid 307] mkdir("./1", 0777) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 333 attached , child_tidptr=0x55558827a650) = 3 [pid 333] set_robust_list(0x55558827a660, 24) = 0 [pid 333] chdir("./1") = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 333] setpgid(0, 0) = 0 [pid 333] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 333] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 333] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3) = 0 [pid 333] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 333] write(1, "executing program\n", 18) = 18 [pid 333] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 333] setns(201, 0) = 0 [pid 333] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 333] setns(3, 0) = 0 [pid 333] close(3) = 0 [pid 333] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 333] ioctl(3, TIOCSETD, [15]) = 0 [pid 333] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [ 29.712899][ T43] Bluetooth: hci1: Frame reassembly failed (-84) [ 29.713779][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 29.755841][ T10] Bluetooth: hci3: Frame reassembly failed (-84) [pid 333] ioctl(4, HCISETLINKPOL [pid 328] <... close resumed>) = 0 [pid 328] close(4) = 0 [pid 328] close(5) = -1 EBADF (Bad file descriptor) [pid 328] close(6) = -1 EBADF (Bad file descriptor) [pid 328] close(7) = -1 EBADF (Bad file descriptor) [pid 328] close(8) = -1 EBADF (Bad file descriptor) [pid 328] close(9) = -1 EBADF (Bad file descriptor) [pid 328] close(10) = -1 EBADF (Bad file descriptor) [pid 328] close(11) = -1 EBADF (Bad file descriptor) [pid 328] close(12) = -1 EBADF (Bad file descriptor) [pid 328] close(13) = -1 EBADF (Bad file descriptor) [pid 328] close(14) = -1 EBADF (Bad file descriptor) [pid 328] close(15) = -1 EBADF (Bad file descriptor) [pid 328] close(16) = -1 EBADF (Bad file descriptor) [pid 328] close(17) = -1 EBADF (Bad file descriptor) [pid 328] close(18) = -1 EBADF (Bad file descriptor) [pid 328] close(19) = -1 EBADF (Bad file descriptor) [pid 328] close(20) = -1 EBADF (Bad file descriptor) [pid 328] close(21) = -1 EBADF (Bad file descriptor) [pid 328] close(22) = -1 EBADF (Bad file descriptor) [pid 328] close(23) = -1 EBADF (Bad file descriptor) [pid 328] close(24) = -1 EBADF (Bad file descriptor) [pid 328] close(25) = -1 EBADF (Bad file descriptor) [pid 328] close(26) = -1 EBADF (Bad file descriptor) [pid 328] close(27) = -1 EBADF (Bad file descriptor) [pid 328] close(28) = -1 EBADF (Bad file descriptor) [pid 328] close(29) = -1 EBADF (Bad file descriptor) [pid 328] exit_group(0) = ? [pid 328] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 306] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 306] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./1/binderfs") = 0 [pid 306] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./1/cgroup.net") = 0 [pid 306] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./1/cgroup.cpu") = 0 [pid 306] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./1/cgroup") = 0 [pid 306] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./1") = 0 [pid 306] mkdir("./2", 0777) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 4 ./strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x55558827a660, 24) = 0 [pid 336] chdir("./2") = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 336] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 336] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3) = 0 [pid 336] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 336] write(1, "executing program\n", 18) = 18 [pid 336] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 336] setns(201, 0) = 0 [pid 336] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 336] setns(3, 0) = 0 [pid 336] close(3) = 0 [pid 336] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 336] ioctl(3, TIOCSETD, [15]) = 0 [pid 336] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [ 30.834509][ T318] Bluetooth: hci5: command 0x1003 tx timeout [ 30.834574][ T45] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 30.871157][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [pid 336] ioctl(4, HCISETLINKPOL [pid 330] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 330] close(3 [pid 331] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [ 31.714538][ T323] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 31.714538][ T311] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 31.714596][ T323] Bluetooth: hci2: command 0x1003 tx timeout [ 31.720502][ T315] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.726532][ T318] Bluetooth: hci0: command 0x1003 tx timeout [ 31.744220][ T330] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 31.750202][ T331] Bluetooth: hci0: Opcode 0x080f failed: -22 [pid 331] close(3) = 0 [pid 331] close(4) = 0 [pid 331] close(5) = -1 EBADF (Bad file descriptor) [pid 331] close(6) = -1 EBADF (Bad file descriptor) [pid 331] close(7) = -1 EBADF (Bad file descriptor) [pid 331] close(8) = -1 EBADF (Bad file descriptor) [pid 331] close(9) = -1 EBADF (Bad file descriptor) [pid 331] close(10) = -1 EBADF (Bad file descriptor) [pid 331] close(11) = -1 EBADF (Bad file descriptor) [pid 331] close(12) = -1 EBADF (Bad file descriptor) [pid 331] close(13) = -1 EBADF (Bad file descriptor) [pid 331] close(14) = -1 EBADF (Bad file descriptor) [pid 331] close(15) = -1 EBADF (Bad file descriptor) [pid 331] close(16) = -1 EBADF (Bad file descriptor) [pid 331] close(17) = -1 EBADF (Bad file descriptor) [pid 331] close(18) = -1 EBADF (Bad file descriptor) [pid 331] close(19) = -1 EBADF (Bad file descriptor) [pid 331] close(20) = -1 EBADF (Bad file descriptor) [pid 331] close(21) = -1 EBADF (Bad file descriptor) [pid 331] close(22) = -1 EBADF (Bad file descriptor) [pid 331] close(23) = -1 EBADF (Bad file descriptor) [pid 331] close(24) = -1 EBADF (Bad file descriptor) [pid 331] close(25) = -1 EBADF (Bad file descriptor) [pid 331] close(26) = -1 EBADF (Bad file descriptor) [pid 331] close(27) = -1 EBADF (Bad file descriptor) [pid 331] close(28) = -1 EBADF (Bad file descriptor) [pid 331] close(29) = -1 EBADF (Bad file descriptor) [pid 331] exit_group(0) = ? [pid 331] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 305] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 305] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./1/binderfs") = 0 [pid 305] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./1/cgroup.net") = 0 [pid 305] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./1/cgroup.cpu") = 0 [pid 305] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./1/cgroup") = 0 [pid 305] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./1") = 0 [pid 305] mkdir("./2", 0777) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 338 attached , child_tidptr=0x55558827a650) = 4 [pid 338] set_robust_list(0x55558827a660, 24) = 0 [pid 338] chdir("./2") = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 338] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 338] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 [pid 338] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 338] write(1, "executing program\n", 18) = 18 [pid 338] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 338] setns(201, 0) = 0 [pid 338] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 338] setns(3, 0) = 0 [pid 338] close(3) = 0 [pid 338] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 338] ioctl(3, TIOCSETD, [15]) = 0 [pid 338] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 338] ioctl(4, HCISETLINKPOL, 0x400000000300) = -1 ENODEV (No such device) [ 31.794530][ T315] Bluetooth: hci3: command 0x1003 tx timeout [ 31.794555][ T309] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 32.914492][ T45] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 32.914500][ T315] Bluetooth: hci4: command 0x1003 tx timeout [pid 338] close(3 [pid 332] <... ioctl resumed>, 0x400000000300) = -1 ETIMEDOUT (Connection timed out) [pid 332] close(3 [pid 333] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 333] close(3 [pid 330] <... close resumed>) = 0 [pid 330] close(4) = 0 [pid 336] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 336] close(3 [pid 330] close(5) = -1 EBADF (Bad file descriptor) [pid 330] close(6) = -1 EBADF (Bad file descriptor) [pid 330] close(7) = -1 EBADF (Bad file descriptor) [pid 330] close(8) = -1 EBADF (Bad file descriptor) [pid 330] close(9) = -1 EBADF (Bad file descriptor) [pid 330] close(10) = -1 EBADF (Bad file descriptor) [pid 330] close(11) = -1 EBADF (Bad file descriptor) [pid 330] close(12) = -1 EBADF (Bad file descriptor) [pid 330] close(13) = -1 EBADF (Bad file descriptor) [pid 330] close(14) = -1 EBADF (Bad file descriptor) [pid 330] close(15) = -1 EBADF (Bad file descriptor) [pid 330] close(16) = -1 EBADF (Bad file descriptor) [pid 330] close(17) = -1 EBADF (Bad file descriptor) [pid 330] close(18) = -1 EBADF (Bad file descriptor) [pid 330] close(19) = -1 EBADF (Bad file descriptor) [pid 330] close(20) = -1 EBADF (Bad file descriptor) [pid 330] close(21) = -1 EBADF (Bad file descriptor) [pid 330] close(22) = -1 EBADF (Bad file descriptor) [pid 330] close(23) = -1 EBADF (Bad file descriptor) [pid 330] close(24) = -1 EBADF (Bad file descriptor) [pid 330] close(25) = -1 EBADF (Bad file descriptor) [pid 330] close(26) = -1 EBADF (Bad file descriptor) [pid 330] close(27) = -1 EBADF (Bad file descriptor) [pid 330] close(28) = -1 EBADF (Bad file descriptor) [pid 330] close(29) = -1 EBADF (Bad file descriptor) [pid 330] exit_group(0) = ? [pid 330] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 301] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./1/binderfs") = 0 [pid 301] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./1/cgroup.net") = 0 [pid 301] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./1/cgroup.cpu") = 0 [pid 301] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./1/cgroup") = 0 [pid 301] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./1") = 0 [pid 301] mkdir("./2", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 4 ./strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x55558827a660, 24) = 0 [pid 341] chdir("./2") = 0 [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 341] setpgid(0, 0) = 0 [pid 341] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 341] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 341] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 341] write(3, "1000", 4) = 4 [pid 341] close(3) = 0 [pid 341] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 341] write(1, "executing program\n", 18) = 18 [pid 341] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 341] setns(201, 0) = 0 [pid 341] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 341] setns(3, 0) = 0 [pid 341] close(3) = 0 [pid 341] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 341] ioctl(3, TIOCSETD, [15]) = 0 [ 33.794477][ T45] Bluetooth: hci0: command 0x080f tx timeout [ 33.794482][ T332] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 33.806961][ T333] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 33.812940][ T336] Bluetooth: hci0: Opcode 0x080f failed: -22 [pid 341] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 341] ioctl(4, HCISETLINKPOL [pid 332] <... close resumed>) = 0 [pid 332] close(4) = 0 [pid 332] close(5) = -1 EBADF (Bad file descriptor) [pid 332] close(6) = -1 EBADF (Bad file descriptor) [pid 332] close(7) = -1 EBADF (Bad file descriptor) [pid 332] close(8) = -1 EBADF (Bad file descriptor) [pid 332] close(9) = -1 EBADF (Bad file descriptor) [pid 332] close(10) = -1 EBADF (Bad file descriptor) [pid 332] close(11) = -1 EBADF (Bad file descriptor) [pid 332] close(12) = -1 EBADF (Bad file descriptor) [pid 332] close(13) = -1 EBADF (Bad file descriptor) [pid 332] close(14) = -1 EBADF (Bad file descriptor) [pid 332] close(15) = -1 EBADF (Bad file descriptor) [pid 332] close(16) = -1 EBADF (Bad file descriptor) [pid 332] close(17) = -1 EBADF (Bad file descriptor) [pid 332] close(18) = -1 EBADF (Bad file descriptor) [pid 332] close(19) = -1 EBADF (Bad file descriptor) [pid 332] close(20) = -1 EBADF (Bad file descriptor) [pid 332] close(21) = -1 EBADF (Bad file descriptor) [pid 332] close(22) = -1 EBADF (Bad file descriptor) [pid 332] close(23) = -1 EBADF (Bad file descriptor) [pid 332] close(24) = -1 EBADF (Bad file descriptor) [pid 332] close(25) = -1 EBADF (Bad file descriptor) [pid 332] close(26) = -1 EBADF (Bad file descriptor) [pid 332] close(27) = -1 EBADF (Bad file descriptor) [pid 332] close(28) = -1 EBADF (Bad file descriptor) [pid 332] close(29) = -1 EBADF (Bad file descriptor) [pid 332] exit_group(0) = ? [pid 332] +++ exited with 0 +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 304] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 304] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 304] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 304] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 304] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./1/binderfs") = 0 [pid 304] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./1/cgroup.net") = 0 [pid 304] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./1/cgroup.cpu") = 0 [pid 304] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./1/cgroup") = 0 [pid 304] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [pid 304] rmdir("./1") = 0 [pid 304] mkdir("./2", 0777) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 4 ./strace-static-x86_64: Process 342 attached [pid 336] <... close resumed>) = 0 [pid 333] <... close resumed>) = 0 [pid 338] <... close resumed>) = 0 [pid 336] close(4 [pid 333] close(4 [pid 336] <... close resumed>) = 0 [pid 333] <... close resumed>) = 0 [pid 336] close(5 [pid 333] close(5 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] set_robust_list(0x55558827a660, 24 [pid 338] close(4 [pid 336] close(6 [pid 333] close(6 [pid 342] <... set_robust_list resumed>) = 0 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] chdir("./2" [pid 338] <... close resumed>) = 0 [pid 336] close(7 [pid 333] close(7 [pid 338] close(5 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... chdir resumed>) = 0 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(8 [pid 333] close(8 [pid 342] <... prctl resumed>) = 0 [pid 338] close(6 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(7 [pid 336] close(9 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] setpgid(0, 0 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(9 [pid 342] <... setpgid resumed>) = 0 [pid 338] close(8 [pid 336] close(10 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(9) = -1 EBADF (Bad file descriptor) [pid 338] close(10 [pid 342] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(10 [pid 338] close(11 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(12 [pid 336] close(11 [pid 333] close(11 [pid 342] <... symlink resumed>) = 0 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 338] close(13 [pid 336] close(12 [pid 333] close(12 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(14 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... symlink resumed>) = 0 [pid 338] close(15 [pid 336] close(13 [pid 333] close(13 [pid 342] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(16 [pid 342] <... symlink resumed>) = 0 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(14 [pid 333] close(14 [pid 338] close(17) = -1 EBADF (Bad file descriptor) [pid 338] close(18 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(19 [pid 336] close(15 [pid 342] <... openat resumed>) = 3 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(15 [pid 342] write(3, "1000", 4 [pid 338] close(20 [pid 336] close(16 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... write resumed>) = 4 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(16 [pid 342] close(3 [pid 338] close(21 [pid 336] close(17 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = 0 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(17 [pid 342] symlink("/dev/binderfs", "./binderfs" [pid 338] close(22 [pid 336] close(18 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... symlink resumed>) = 0 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(23 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(18 [pid 342] write(1, "executing program\n", 18 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 336] close(19 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(24 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(19 [pid 342] <... write resumed>) = 18 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(25 [pid 336] close(20 [pid 342] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(26 [pid 336] close(21 [pid 342] <... openat resumed>) = 3 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(27 [pid 336] close(22 [pid 333] close(20 [pid 342] setns(201, 0 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(28 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(23 [pid 342] <... setns resumed>) = 0 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(21 [pid 338] close(29 [pid 342] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... socket resumed>) = 4 [pid 338] exit_group(0 [pid 336] close(24 [pid 338] <... exit_group resumed>) = ? [pid 342] setns(3, 0 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(22 [pid 342] <... setns resumed>) = 0 [pid 336] close(25 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] close(3 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(23 [pid 342] <... close resumed>) = 0 [pid 338] +++ exited with 0 +++ [pid 336] close(26 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(24 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 336] close(27) = -1 EBADF (Bad file descriptor) [pid 336] close(28 [pid 342] <... openat resumed>) = 3 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 342] ioctl(3, TIOCSETD, [15] [pid 336] close(29 [pid 333] close(25 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... ioctl resumed>) = 0 [pid 336] exit_group(0 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 336] <... exit_group resumed>) = ? [pid 333] close(26 [pid 342] <... ioctl resumed>, 0x4) = 0 [pid 336] +++ exited with 0 +++ [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 33.840554][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.874453][ T309] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 33.874502][ T323] Bluetooth: hci2: command 0x1003 tx timeout [pid 305] <... restart_syscall resumed>) = 0 [pid 342] ioctl(4, HCISETLINKPOL [pid 333] close(27 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 333] close(28 [pid 305] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 333] close(29 [pid 305] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... openat resumed>) = 3 [pid 333] exit_group(0 [pid 305] newfstatat(3, "", [pid 333] <... exit_group resumed>) = ? [pid 305] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 333] +++ exited with 0 +++ [pid 305] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 305] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./2/binderfs", [pid 306] <... restart_syscall resumed>) = 0 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./2/binderfs") = 0 [pid 306] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 306] <... openat resumed>) = 3 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] newfstatat(3, "", [pid 305] unlink("./2/cgroup.net" [pid 306] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 305] <... unlink resumed>) = 0 [pid 306] getdents64(3, [pid 305] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] newfstatat(AT_FDCWD, "./2/binderfs", [pid 305] unlink("./2/cgroup.cpu" [pid 307] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... unlink resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] unlink("./2/binderfs" [pid 305] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... unlink resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... openat resumed>) = 3 [pid 306] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] newfstatat(AT_FDCWD, "./2/cgroup", [pid 307] newfstatat(3, "", [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 306] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 305] unlink("./2/cgroup" [pid 307] getdents64(3, [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... unlink resumed>) = 0 [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 306] unlink("./2/cgroup.net" [pid 305] getdents64(3, [pid 307] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... unlink resumed>) = 0 [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] close(3 [pid 307] newfstatat(AT_FDCWD, "./1/binderfs", [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... close resumed>) = 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 305] rmdir("./2" [pid 307] unlink("./1/binderfs" [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 306] unlink("./2/cgroup.cpu" [pid 305] mkdir("./3", 0777 [pid 307] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... unlink resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... mkdir resumed>) = 0 [pid 307] unlink("./1/cgroup.net" [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... unlink resumed>) = 0 [pid 306] newfstatat(AT_FDCWD, "./2/cgroup", [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./1/cgroup.cpu") = 0 [pid 307] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 343 attached [pid 307] newfstatat(AT_FDCWD, "./1/cgroup", [pid 306] unlink("./2/cgroup" [pid 343] set_robust_list(0x55558827a660, 24 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] <... set_robust_list resumed>) = 0 [pid 307] unlink("./1/cgroup" [pid 306] <... unlink resumed>) = 0 [pid 305] <... clone resumed>, child_tidptr=0x55558827a650) = 5 [pid 343] chdir("./3" [pid 307] <... unlink resumed>) = 0 [pid 343] <... chdir resumed>) = 0 [pid 307] getdents64(3, [pid 306] getdents64(3, [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 343] <... prctl resumed>) = 0 [pid 307] close(3 [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 343] setpgid(0, 0 [pid 307] <... close resumed>) = 0 [pid 343] <... setpgid resumed>) = 0 [pid 307] rmdir("./1" [pid 306] close(3 [pid 343] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 307] <... rmdir resumed>) = 0 [pid 343] <... symlink resumed>) = 0 [pid 307] mkdir("./2", 0777 [pid 306] <... close resumed>) = 0 [pid 343] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 307] <... mkdir resumed>) = 0 [pid 306] rmdir("./2" [pid 343] <... symlink resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 343] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 306] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 344 attached [pid 343] <... symlink resumed>) = 0 [pid 306] mkdir("./3", 0777 [pid 344] set_robust_list(0x55558827a660, 24 [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] <... clone resumed>, child_tidptr=0x55558827a650) = 4 [pid 344] <... set_robust_list resumed>) = 0 [pid 343] <... openat resumed>) = 3 [pid 306] <... mkdir resumed>) = 0 [pid 344] chdir("./2" [pid 343] write(3, "1000", 4 [pid 344] <... chdir resumed>) = 0 [pid 343] <... write resumed>) = 4 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 343] close(3 [pid 344] <... prctl resumed>) = 0 [pid 343] <... close resumed>) = 0 [pid 344] setpgid(0, 0 [pid 343] symlink("/dev/binderfs", "./binderfs" [pid 344] <... setpgid resumed>) = 0 [pid 343] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 345 attached [pid 344] symlink("/syzcgroup/unified/syz4", "./cgroup" executing program [pid 343] write(1, "executing program\n", 18 [pid 345] set_robust_list(0x55558827a660, 24 [pid 344] <... symlink resumed>) = 0 [pid 343] <... write resumed>) = 18 [pid 306] <... clone resumed>, child_tidptr=0x55558827a650) = 5 [pid 345] <... set_robust_list resumed>) = 0 [pid 344] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 343] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 345] chdir("./3" [pid 344] <... symlink resumed>) = 0 [pid 345] <... chdir resumed>) = 0 [pid 344] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 343] <... openat resumed>) = 3 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 344] <... symlink resumed>) = 0 [pid 343] setns(201, 0 [pid 345] <... prctl resumed>) = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 343] <... setns resumed>) = 0 [pid 345] setpgid(0, 0 [pid 344] <... openat resumed>) = 3 [pid 345] <... setpgid resumed>) = 0 [pid 344] write(3, "1000", 4 [pid 343] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 345] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 344] <... write resumed>) = 4 [pid 343] <... socket resumed>) = 4 [pid 345] <... symlink resumed>) = 0 [pid 344] close(3 [pid 343] setns(3, 0 [pid 345] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 344] <... close resumed>) = 0 [pid 343] <... setns resumed>) = 0 [pid 345] <... symlink resumed>) = 0 [pid 344] symlink("/dev/binderfs", "./binderfs" [pid 343] close(3 [pid 345] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 344] <... symlink resumed>) = 0 [pid 343] <... close resumed>) = 0 [pid 345] <... symlink resumed>) = 0 [pid 344] write(1, "executing program\n", 18executing program [pid 343] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 344] <... write resumed>) = 18 [pid 343] <... openat resumed>) = 3 [pid 345] <... openat resumed>) = 3 [pid 344] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 343] ioctl(3, TIOCSETD, [15] [pid 345] write(3, "1000", 4 [pid 344] <... openat resumed>) = 3 [pid 343] <... ioctl resumed>) = 0 [pid 345] <... write resumed>) = 4 [pid 344] setns(201, 0 [pid 343] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 345] close(3 [pid 344] <... setns resumed>) = 0 [pid 345] <... close resumed>) = 0 [pid 345] symlink("/dev/binderfs", "./binderfs" [pid 344] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 343] <... ioctl resumed>, 0x4) = 0 [pid 345] <... symlink resumed>) = 0 [pid 344] <... socket resumed>) = 4 executing program [pid 345] write(1, "executing program\n", 18 [pid 344] setns(3, 0 [pid 343] ioctl(4, HCISETLINKPOL [pid 345] <... write resumed>) = 18 [pid 344] <... setns resumed>) = 0 [pid 345] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 344] close(3 [pid 345] <... openat resumed>) = 3 [pid 344] <... close resumed>) = 0 [pid 345] setns(201, 0) = 0 [pid 344] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 345] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 345] setns(3, 0) = 0 [pid 344] <... openat resumed>) = 3 [pid 345] close(3) = 0 [pid 344] ioctl(3, TIOCSETD, [15] [pid 345] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 345] ioctl(3, TIOCSETD, [15]) = 0 [pid 344] <... ioctl resumed>) = 0 [pid 345] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 344] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 345] <... ioctl resumed>, 0x4) = 0 [pid 344] <... ioctl resumed>, 0x4) = 0 [pid 345] ioctl(4, HCISETLINKPOL [ 33.898136][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 33.922276][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 33.935719][ T43] Bluetooth: hci3: Frame reassembly failed (-84) [ 33.938690][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [pid 344] ioctl(4, HCISETLINKPOL [pid 341] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 341] close(3 [pid 342] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 342] close(3 [pid 343] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 343] close(3 [pid 345] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 345] close(3 [pid 344] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [ 35.874492][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.874502][ T311] Bluetooth: hci0: command 0x1003 tx timeout [ 35.886426][ T341] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 35.892390][ T342] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 35.898413][ T343] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 35.904626][ T345] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 35.910694][ T344] Bluetooth: hci0: Opcode 0x080f failed: -22 [pid 344] close(3) = 0 [pid 344] close(4) = 0 [pid 344] close(5) = -1 EBADF (Bad file descriptor) [pid 344] close(6) = -1 EBADF (Bad file descriptor) [pid 344] close(7) = -1 EBADF (Bad file descriptor) [pid 344] close(8) = -1 EBADF (Bad file descriptor) [pid 344] close(9) = -1 EBADF (Bad file descriptor) [pid 344] close(10) = -1 EBADF (Bad file descriptor) [pid 344] close(11) = -1 EBADF (Bad file descriptor) [pid 344] close(12) = -1 EBADF (Bad file descriptor) [pid 344] close(13) = -1 EBADF (Bad file descriptor) [pid 344] close(14) = -1 EBADF (Bad file descriptor) [pid 344] close(15) = -1 EBADF (Bad file descriptor) [pid 344] close(16) = -1 EBADF (Bad file descriptor) [pid 344] close(17) = -1 EBADF (Bad file descriptor) [pid 344] close(18) = -1 EBADF (Bad file descriptor) [pid 344] close(19) = -1 EBADF (Bad file descriptor) [pid 344] close(20) = -1 EBADF (Bad file descriptor) [pid 344] close(21) = -1 EBADF (Bad file descriptor) [pid 344] close(22) = -1 EBADF (Bad file descriptor) [pid 344] close(23) = -1 EBADF (Bad file descriptor) [pid 344] close(24) = -1 EBADF (Bad file descriptor) [pid 344] close(25) = -1 EBADF (Bad file descriptor) [pid 344] close(26) = -1 EBADF (Bad file descriptor) [pid 344] close(27) = -1 EBADF (Bad file descriptor) [pid 344] close(28) = -1 EBADF (Bad file descriptor) [pid 344] close(29) = -1 EBADF (Bad file descriptor) [pid 344] exit_group(0) = ? [pid 344] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 341] <... close resumed>) = 0 [pid 341] close(4) = 0 [pid 341] close(5) = -1 EBADF (Bad file descriptor) [pid 341] close(6) = -1 EBADF (Bad file descriptor) [pid 341] close(7) = -1 EBADF (Bad file descriptor) [pid 341] close(8) = -1 EBADF (Bad file descriptor) [pid 341] close(9) = -1 EBADF (Bad file descriptor) [pid 341] close(10) = -1 EBADF (Bad file descriptor) [pid 341] close(11) = -1 EBADF (Bad file descriptor) [pid 341] close(12) = -1 EBADF (Bad file descriptor) [pid 341] close(13) = -1 EBADF (Bad file descriptor) [pid 341] close(14) = -1 EBADF (Bad file descriptor) [pid 341] close(15) = -1 EBADF (Bad file descriptor) [pid 341] close(16) = -1 EBADF (Bad file descriptor) [pid 341] close(17) = -1 EBADF (Bad file descriptor) [pid 341] close(18) = -1 EBADF (Bad file descriptor) [pid 341] close(19) = -1 EBADF (Bad file descriptor) [pid 341] close(20) = -1 EBADF (Bad file descriptor) [pid 341] close(21) = -1 EBADF (Bad file descriptor) [pid 341] close(22) = -1 EBADF (Bad file descriptor) [pid 341] close(23) = -1 EBADF (Bad file descriptor) [pid 341] close(24) = -1 EBADF (Bad file descriptor) [pid 341] close(25) = -1 EBADF (Bad file descriptor) [pid 341] close(26) = -1 EBADF (Bad file descriptor) [pid 341] close(27) = -1 EBADF (Bad file descriptor) [pid 341] close(28) = -1 EBADF (Bad file descriptor) [pid 341] close(29) = -1 EBADF (Bad file descriptor) [pid 341] exit_group(0) = ? [pid 341] +++ exited with 0 +++ [pid 307] <... restart_syscall resumed>) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 307] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 307] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 307] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 342] <... close resumed>) = 0 [pid 307] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./2/binderfs") = 0 [pid 307] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 343] <... close resumed>) = 0 [pid 345] <... close resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./2/cgroup.net") = 0 [pid 307] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 345] close(4 [pid 343] close(4 [pid 342] close(4 [pid 307] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... restart_syscall resumed>) = 0 [pid 307] unlink("./2/cgroup.cpu" [pid 345] <... close resumed>) = 0 [pid 343] <... close resumed>) = 0 [pid 342] <... close resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 345] close(5 [pid 343] close(5 [pid 342] close(5 [pid 307] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] close(6 [pid 343] close(6 [pid 342] close(6 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] newfstatat(AT_FDCWD, "./2/cgroup", [pid 301] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 345] close(7 [pid 343] close(7 [pid 342] close(7 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] unlink("./2/cgroup" [pid 301] <... openat resumed>) = 3 [pid 345] close(8 [pid 343] close(8 [pid 342] close(8 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... unlink resumed>) = 0 [pid 301] newfstatat(3, "", [pid 345] close(9 [pid 343] close(9 [pid 342] close(9 [pid 307] getdents64(3, [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 345] close(10 [pid 343] close(10 [pid 342] close(10 [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] close(3 [pid 301] getdents64(3, [pid 345] close(11 [pid 343] close(11 [pid 342] close(11 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = 0 [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 345] close(12 [pid 343] close(12 [pid 342] close(12 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] rmdir("./2" [pid 301] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 345] close(13 [pid 343] close(13 [pid 342] close(13 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... rmdir resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 345] close(14 [pid 343] close(14 [pid 342] close(14 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] mkdir("./3", 0777 [pid 301] newfstatat(AT_FDCWD, "./2/binderfs", [pid 345] close(15 [pid 343] close(15 [pid 342] close(15 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... mkdir resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 345] close(16 [pid 343] close(16 [pid 342] close(16 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] unlink("./2/binderfs" [pid 345] close(17 [pid 343] close(17 [pid 342] close(17 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] close(18 [pid 343] close(18 [pid 342] close(18 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 349 attached [pid 345] close(19 [pid 343] close(19 [pid 342] close(19 [pid 301] <... unlink resumed>) = 0 [pid 349] set_robust_list(0x55558827a660, 24 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... set_robust_list resumed>) = 0 [pid 345] close(20 [pid 343] close(20 [pid 342] close(20 [pid 307] <... clone resumed>, child_tidptr=0x55558827a650) = 5 [pid 301] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 349] chdir("./3" [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... chdir resumed>) = 0 [pid 345] close(21 [pid 343] close(21 [pid 342] close(21 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... prctl resumed>) = 0 [pid 345] close(22 [pid 343] close(22 [pid 342] close(22 [pid 301] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 349] setpgid(0, 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... setpgid resumed>) = 0 [pid 345] close(23 [pid 343] close(23 [pid 342] close(23 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 349] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... symlink resumed>) = 0 [pid 345] close(24 [pid 343] close(24 [pid 342] close(24 [pid 301] unlink("./2/cgroup.net" [pid 349] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... symlink resumed>) = 0 [pid 345] close(25 [pid 343] close(25 [pid 342] close(25 [pid 301] <... unlink resumed>) = 0 [pid 349] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... symlink resumed>) = 0 [pid 345] close(26 [pid 343] close(26 [pid 342] close(26 [pid 301] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... openat resumed>) = 3 [pid 345] close(27 [pid 343] close(27 [pid 342] close(27 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 349] write(3, "1000", 4 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 349] <... write resumed>) = 4 [pid 345] close(28 [pid 343] close(28 [pid 342] close(28 [pid 349] close(3 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 349] <... close resumed>) = 0 [pid 345] close(29 [pid 343] close(29 [pid 342] close(29 [pid 301] unlink("./2/cgroup.cpu" [pid 349] symlink("/dev/binderfs", "./binderfs" [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... symlink resumed>) = 0 [pid 345] exit_group(0 [pid 343] exit_group(0 [pid 342] exit_group(0executing program [pid 301] <... unlink resumed>) = 0 [pid 349] write(1, "executing program\n", 18 [pid 345] <... exit_group resumed>) = ? [pid 343] <... exit_group resumed>) = ? [pid 342] <... exit_group resumed>) = ? [pid 349] <... write resumed>) = 18 [pid 301] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 345] +++ exited with 0 +++ [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 301] newfstatat(AT_FDCWD, "./2/cgroup", [pid 343] +++ exited with 0 +++ [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 349] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 342] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 301] unlink("./2/cgroup" [pid 349] <... openat resumed>) = 3 [pid 306] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... unlink resumed>) = 0 [pid 349] setns(201, 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 301] getdents64(3, [pid 349] <... setns resumed>) = 0 [pid 306] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 349] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 306] <... openat resumed>) = 3 [pid 301] close(3 [pid 349] <... socket resumed>) = 4 [pid 306] newfstatat(3, "", [pid 301] <... close resumed>) = 0 [pid 349] setns(3, 0 [pid 306] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 301] rmdir("./2" [pid 349] <... setns resumed>) = 0 [pid 306] getdents64(3, [pid 301] <... rmdir resumed>) = 0 [pid 349] close(3 [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 301] mkdir("./3", 0777 [pid 349] <... close resumed>) = 0 [pid 306] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... mkdir resumed>) = 0 [pid 349] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 349] <... openat resumed>) = 3 [pid 306] newfstatat(AT_FDCWD, "./3/binderfs", [pid 349] ioctl(3, TIOCSETD, [15]./strace-static-x86_64: Process 350 attached ) = 0 [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 350] set_robust_list(0x55558827a660, 24 [pid 349] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 350] <... set_robust_list resumed>) = 0 [pid 306] unlink("./3/binderfs" [pid 301] <... clone resumed>, child_tidptr=0x55558827a650) = 5 [ 35.954609][ T318] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 35.954609][ T315] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 35.954680][ T318] Bluetooth: hci2: command 0x1003 tx timeout [ 35.960665][ T315] Bluetooth: hci1: command 0x1003 tx timeout [ 35.966490][ T309] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 35.972242][ T323] Bluetooth: hci2: Opcode 0x1003 failed: -110 [pid 350] chdir("./3" [pid 349] <... ioctl resumed>, 0x4) = 0 [pid 306] <... unlink resumed>) = 0 [pid 350] <... chdir resumed>) = 0 [pid 349] ioctl(4, HCISETLINKPOL [pid 306] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... restart_syscall resumed>) = 0 [pid 350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 350] <... prctl resumed>) = 0 [pid 306] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 350] setpgid(0, 0 [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 350] <... setpgid resumed>) = 0 [pid 306] unlink("./3/cgroup.net" [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 350] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 305] <... openat resumed>) = 3 [pid 350] <... symlink resumed>) = 0 [pid 306] <... unlink resumed>) = 0 [pid 305] newfstatat(3, "", [pid 304] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 350] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 306] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 304] <... openat resumed>) = 3 [pid 350] <... symlink resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] getdents64(3, [pid 304] newfstatat(3, "", [pid 350] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 306] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 350] <... symlink resumed>) = 0 [pid 305] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./3/binderfs", [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] unlink("./3/cgroup.cpu" [pid 305] unlink("./3/binderfs" [pid 304] getdents64(3, [pid 350] <... openat resumed>) = 3 [pid 305] <... unlink resumed>) = 0 [pid 305] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... unlink resumed>) = 0 [pid 350] write(3, "1000", 4 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 350] <... write resumed>) = 4 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 304] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 350] close(3 [pid 306] newfstatat(AT_FDCWD, "./3/cgroup", [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./3/cgroup.net" [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 350] <... close resumed>) = 0 [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... unlink resumed>) = 0 [pid 305] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 350] symlink("/dev/binderfs", "./binderfs" [pid 304] newfstatat(AT_FDCWD, "./2/binderfs", [pid 306] unlink("./3/cgroup" [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 350] <... symlink resumed>) = 0 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 350] write(1, "executing program\n", 18 [pid 306] <... unlink resumed>) = 0 executing program [pid 305] unlink("./3/cgroup.cpu" [pid 304] unlink("./2/binderfs" [pid 350] <... write resumed>) = 18 [pid 306] getdents64(3, [pid 305] <... unlink resumed>) = 0 [pid 305] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 350] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... unlink resumed>) = 0 [pid 305] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./3/cgroup" [pid 350] <... openat resumed>) = 3 [pid 306] close(3 [pid 305] <... unlink resumed>) = 0 [pid 304] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 350] setns(201, 0 [pid 306] <... close resumed>) = 0 [pid 305] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 350] <... setns resumed>) = 0 [pid 306] rmdir("./3" [pid 305] close(3 [pid 350] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 306] <... rmdir resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 304] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 305] rmdir("./3" [pid 350] <... socket resumed>) = 4 [pid 306] mkdir("./4", 0777 [pid 305] <... rmdir resumed>) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 350] setns(3, 0 [pid 305] mkdir("./4", 0777 [pid 350] <... setns resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 304] unlink("./2/cgroup.net" [pid 350] close(3 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 352 attached ./strace-static-x86_64: Process 351 attached [pid 350] <... close resumed>) = 0 [pid 304] <... unlink resumed>) = 0 [pid 352] set_robust_list(0x55558827a660, 24 [pid 351] set_robust_list(0x55558827a660, 24 [pid 350] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 306] <... clone resumed>, child_tidptr=0x55558827a650) = 6 [pid 305] <... clone resumed>, child_tidptr=0x55558827a650) = 6 [pid 304] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 352] <... set_robust_list resumed>) = 0 [pid 351] <... set_robust_list resumed>) = 0 [pid 350] <... openat resumed>) = 3 [pid 352] chdir("./4" [pid 350] ioctl(3, TIOCSETD, [15] [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 352] <... chdir resumed>) = 0 [pid 351] chdir("./4" [pid 350] <... ioctl resumed>) = 0 [pid 304] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 351] <... chdir resumed>) = 0 [pid 350] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 352] <... prctl resumed>) = 0 [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 352] setpgid(0, 0 [pid 351] <... prctl resumed>) = 0 [pid 352] <... setpgid resumed>) = 0 [pid 351] setpgid(0, 0 [pid 352] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 351] <... setpgid resumed>) = 0 [pid 350] <... ioctl resumed>, 0x4) = 0 [pid 304] unlink("./2/cgroup.cpu" [pid 352] <... symlink resumed>) = 0 [pid 351] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 350] ioctl(4, HCISETLINKPOL [pid 352] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 351] <... symlink resumed>) = 0 [pid 304] <... unlink resumed>) = 0 [pid 352] <... symlink resumed>) = 0 [pid 351] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 304] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 352] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 351] <... symlink resumed>) = 0 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 352] <... symlink resumed>) = 0 [pid 351] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 304] newfstatat(AT_FDCWD, "./2/cgroup", [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 351] <... symlink resumed>) = 0 [pid 352] <... openat resumed>) = 3 [pid 304] unlink("./2/cgroup" [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 352] write(3, "1000", 4 [pid 304] <... unlink resumed>) = 0 [pid 351] <... openat resumed>) = 3 [pid 304] getdents64(3, [pid 352] <... write resumed>) = 4 [pid 351] write(3, "1000", 4 [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 352] close(3 [pid 351] <... write resumed>) = 4 [pid 304] close(3 [pid 352] <... close resumed>) = 0 [pid 351] close(3 [pid 304] <... close resumed>) = 0 [pid 352] symlink("/dev/binderfs", "./binderfs" [pid 351] <... close resumed>) = 0 [pid 304] rmdir("./2" [pid 352] <... symlink resumed>) = 0 executing program [pid 351] symlink("/dev/binderfs", "./binderfs" [pid 304] <... rmdir resumed>) = 0 [pid 352] write(1, "executing program\n", 18 [pid 304] mkdir("./3", 0777 [pid 352] <... write resumed>) = 18 [pid 351] <... symlink resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 executing program [pid 352] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 351] write(1, "executing program\n", 18 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 352] <... openat resumed>) = 3 [pid 351] <... write resumed>) = 18 [pid 352] setns(201, 0 [pid 351] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 352] <... setns resumed>) = 0 [pid 351] <... openat resumed>) = 3 ./strace-static-x86_64: Process 353 attached [pid 352] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 351] setns(201, 0 [pid 304] <... clone resumed>, child_tidptr=0x55558827a650) = 5 [pid 353] set_robust_list(0x55558827a660, 24 [pid 352] <... socket resumed>) = 4 [pid 351] <... setns resumed>) = 0 [pid 353] <... set_robust_list resumed>) = 0 [pid 352] setns(3, 0 [pid 351] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 352] <... setns resumed>) = 0 [pid 351] <... socket resumed>) = 4 [pid 353] chdir("./3" [pid 352] close(3 [pid 351] setns(3, 0 [pid 353] <... chdir resumed>) = 0 [pid 352] <... close resumed>) = 0 [pid 351] <... setns resumed>) = 0 [pid 353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 352] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 351] close(3 [pid 353] <... prctl resumed>) = 0 [pid 353] setpgid(0, 0 [pid 352] <... openat resumed>) = 3 [pid 351] <... close resumed>) = 0 [pid 353] <... setpgid resumed>) = 0 [pid 352] ioctl(3, TIOCSETD, [15] [pid 351] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 353] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 352] <... ioctl resumed>) = 0 [pid 351] <... openat resumed>) = 3 [pid 352] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 351] ioctl(3, TIOCSETD, [15] [pid 353] <... symlink resumed>) = 0 [pid 353] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 353] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 352] <... ioctl resumed>, 0x4) = 0 [pid 353] <... symlink resumed>) = 0 [pid 353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 353] write(3, "1000", 4) = 4 [pid 351] <... ioctl resumed>) = 0 [pid 353] close(3) = 0 [pid 353] symlink("/dev/binderfs", "./binderfs" [pid 351] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 353] <... symlink resumed>) = 0 executing program [pid 353] write(1, "executing program\n", 18) = 18 [pid 353] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 353] setns(201, 0) = 0 [pid 353] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 352] ioctl(4, HCISETLINKPOL [pid 351] <... ioctl resumed>, 0x4) = 0 [pid 353] setns(3, 0) = 0 [pid 353] close(3) = 0 [pid 351] ioctl(4, HCISETLINKPOL [pid 353] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 353] ioctl(3, TIOCSETD, [15]) = 0 [pid 353] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [ 36.016289][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.038322][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 36.059778][ T43] Bluetooth: hci3: Frame reassembly failed (-84) [ 36.059778][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 36.063831][ T8] Bluetooth: hci4: Frame reassembly failed (-84) [pid 353] ioctl(4, HCISETLINKPOL [pid 349] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 349] close(3 [pid 350] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 350] close(3 [pid 352] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 352] close(3 [pid 351] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 351] close(3 [pid 353] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [ 38.034497][ T323] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.034522][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 38.046543][ T349] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 38.052486][ T350] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 38.058713][ T352] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 38.064827][ T351] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 38.070848][ T353] Bluetooth: hci0: Opcode 0x080f failed: -22 [pid 353] close(3) = 0 [pid 352] <... close resumed>) = 0 [pid 351] <... close resumed>) = 0 [pid 349] <... close resumed>) = 0 [pid 353] close(4 [pid 352] close(4 [pid 351] close(4 [pid 349] close(4 [pid 353] <... close resumed>) = 0 [pid 352] <... close resumed>) = 0 [pid 351] <... close resumed>) = 0 [pid 349] <... close resumed>) = 0 [pid 353] close(5 [pid 352] close(5 [pid 351] close(5 [pid 349] close(5 [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] close(6 [pid 351] close(6 [pid 349] close(6 [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] close(7 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(7 [pid 352] close(6) = -1 EBADF (Bad file descriptor) [pid 352] close(7) = -1 EBADF (Bad file descriptor) [pid 352] close(8) = -1 EBADF (Bad file descriptor) [pid 352] close(9) = -1 EBADF (Bad file descriptor) [pid 352] close(10) = -1 EBADF (Bad file descriptor) [pid 352] close(11) = -1 EBADF (Bad file descriptor) [pid 352] close(12) = -1 EBADF (Bad file descriptor) [pid 352] close(13) = -1 EBADF (Bad file descriptor) [pid 352] close(14) = -1 EBADF (Bad file descriptor) [pid 352] close(15) = -1 EBADF (Bad file descriptor) [pid 352] close(16) = -1 EBADF (Bad file descriptor) [pid 352] close(17) = -1 EBADF (Bad file descriptor) [pid 352] close(18) = -1 EBADF (Bad file descriptor) [pid 352] close(19) = -1 EBADF (Bad file descriptor) [pid 352] close(20) = -1 EBADF (Bad file descriptor) [pid 352] close(21) = -1 EBADF (Bad file descriptor) [pid 352] close(22) = -1 EBADF (Bad file descriptor) [pid 352] close(23) = -1 EBADF (Bad file descriptor) [pid 352] close(24) = -1 EBADF (Bad file descriptor) [pid 352] close(25) = -1 EBADF (Bad file descriptor) [pid 352] close(26) = -1 EBADF (Bad file descriptor) [pid 352] close(27) = -1 EBADF (Bad file descriptor) [pid 352] close(28 [pid 353] close(8 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(7 [pid 352] close(29) = -1 EBADF (Bad file descriptor) [pid 352] exit_group(0) = ? [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] +++ exited with 0 +++ [pid 351] close(8 [pid 349] close(8 [pid 353] close(9 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(9 [pid 349] close(9 [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 353] close(10) = -1 EBADF (Bad file descriptor) [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] close(11 [pid 351] close(10 [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(10 [pid 353] close(12 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = 0 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(11 [pid 350] close(4 [pid 349] close(11 [pid 353] close(13 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = 0 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(12 [pid 350] close(5 [pid 349] close(12 [pid 353] close(14 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(13 [pid 350] close(6 [pid 349] close(13 [pid 353] close(15 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(14 [pid 350] close(7 [pid 349] close(14 [pid 353] close(16 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(15 [pid 350] close(8 [pid 349] close(15 [pid 353] close(17 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(16 [pid 350] close(9 [pid 349] close(16 [pid 353] close(18 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(17 [pid 350] close(10 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] close(19 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(17 [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(18 [pid 350] close(11 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] close(20 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(18 [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(19 [pid 350] close(12 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] close(21 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(19 [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(20 [pid 350] close(13 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] close(22 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(20 [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(21 [pid 350] close(14 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] close(23 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(21 [pid 306] <... restart_syscall resumed>) = 0 [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(22 [pid 350] close(15 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] close(24 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(22 [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(23 [pid 350] close(16 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] close(25 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(23 [pid 306] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(24 [pid 350] close(17 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 353] close(26 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(24 [pid 306] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(25 [pid 350] close(18 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] close(27 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(25 [pid 306] <... openat resumed>) = 3 [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(26 [pid 350] close(19 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] newfstatat(3, "", [pid 353] close(28 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(26 [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(27 [pid 350] close(20 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 353] close(29 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(27 [pid 353] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(28 [pid 350] close(21 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] getdents64(3, [pid 353] exit_group(0 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(28 [pid 353] <... exit_group resumed>) = ? [pid 351] close(29 [pid 350] close(22 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 349] close(29 [pid 306] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 353] +++ exited with 0 +++ [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] exit_group(0 [pid 306] newfstatat(AT_FDCWD, "./4/binderfs", [pid 351] exit_group(0 [pid 350] close(23 [pid 349] <... exit_group resumed>) = ? [pid 351] <... exit_group resumed>) = ? [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 351] +++ exited with 0 +++ [pid 350] close(24 [pid 349] +++ exited with 0 +++ [pid 306] unlink("./4/binderfs" [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] close(25 [pid 306] <... unlink resumed>) = 0 [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 350] close(26 [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 350] close(27 [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] close(28 [pid 306] unlink("./4/cgroup.net" [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] close(29) = -1 EBADF (Bad file descriptor) [pid 306] <... unlink resumed>) = 0 [pid 350] exit_group(0) = ? [pid 306] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./4/cgroup.cpu") = 0 [pid 350] +++ exited with 0 +++ [pid 306] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] newfstatat(AT_FDCWD, "./4/cgroup", [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./4/cgroup") = 0 [pid 306] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./4") = 0 [pid 306] mkdir("./5", 0777) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 356 attached , child_tidptr=0x55558827a650) = 7 [pid 356] set_robust_list(0x55558827a660, 24) = 0 [pid 356] chdir("./5") = 0 [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] setpgid(0, 0) = 0 [pid 356] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 307] <... restart_syscall resumed>) = 0 [pid 356] <... symlink resumed>) = 0 [pid 356] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 307] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... restart_syscall resumed>) = 0 [pid 304] <... restart_syscall resumed>) = 0 [pid 301] <... restart_syscall resumed>) = 0 [pid 356] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 356] <... symlink resumed>) = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 304] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 356] <... openat resumed>) = 3 [pid 307] <... openat resumed>) = 3 [pid 305] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 356] write(3, "1000", 4 [pid 307] newfstatat(3, "", [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 356] <... write resumed>) = 4 [pid 307] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 305] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 304] <... openat resumed>) = 3 [pid 301] <... openat resumed>) = 3 [pid 356] close(3 [pid 307] getdents64(3, [pid 305] <... openat resumed>) = 3 [pid 304] newfstatat(3, "", [pid 301] newfstatat(3, "", [pid 356] <... close resumed>) = 0 [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 305] newfstatat(3, "", [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 356] symlink("/dev/binderfs", "./binderfs" [pid 307] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 304] getdents64(3, [pid 301] getdents64(3, [pid 356] <... symlink resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] getdents64(3, [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 executing program [pid 356] write(1, "executing program\n", 18 [pid 307] newfstatat(AT_FDCWD, "./3/binderfs", [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 304] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 356] <... write resumed>) = 18 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 356] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 307] unlink("./3/binderfs" [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./3/binderfs", [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 356] <... openat resumed>) = 3 [pid 356] setns(201, 0 [pid 307] <... unlink resumed>) = 0 [pid 305] newfstatat(AT_FDCWD, "./4/binderfs", [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] newfstatat(AT_FDCWD, "./3/binderfs", [pid 356] <... setns resumed>) = 0 [pid 307] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./3/binderfs" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 356] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] unlink("./4/binderfs" [pid 304] <... unlink resumed>) = 0 [pid 301] unlink("./3/binderfs" [pid 356] <... socket resumed>) = 4 [pid 307] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 305] <... unlink resumed>) = 0 [pid 304] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... unlink resumed>) = 0 [pid 356] setns(3, 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 356] <... setns resumed>) = 0 [pid 307] unlink("./3/cgroup.net" [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 356] close(3 [pid 307] <... unlink resumed>) = 0 [pid 305] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 356] <... close resumed>) = 0 [pid 307] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./3/cgroup.net" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 356] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 305] unlink("./4/cgroup.net" [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... unlink resumed>) = 0 [pid 301] unlink("./3/cgroup.net" [pid 356] <... openat resumed>) = 3 [pid 305] <... unlink resumed>) = 0 [pid 307] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 304] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... unlink resumed>) = 0 [pid 356] ioctl(3, TIOCSETD, [15] [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 356] <... ioctl resumed>) = 0 [pid 307] unlink("./3/cgroup.cpu" [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 356] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 307] <... unlink resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 38.114551][ T323] Bluetooth: hci4: command 0x1003 tx timeout [ 38.114592][ T318] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 38.120400][ T323] Bluetooth: hci3: command 0x1003 tx timeout [ 38.126382][ T317] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 38.126425][ T309] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 38.132745][ T323] Bluetooth: hci2: command 0x1003 tx timeout [ 38.138157][ T317] Bluetooth: hci1: command 0x1003 tx timeout [ 38.144318][ T315] Bluetooth: hci1: Opcode 0x1003 failed: -110 [pid 307] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 356] <... ioctl resumed>, 0x4) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./3/cgroup.cpu" [pid 301] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 356] ioctl(4, HCISETLINKPOL [pid 305] unlink("./4/cgroup.cpu" [pid 304] <... unlink resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... unlink resumed>) = 0 [pid 304] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] unlink("./3/cgroup.cpu" [pid 305] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... unlink resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./3/cgroup", [pid 301] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] newfstatat(AT_FDCWD, "./4/cgroup", [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./3/cgroup" [pid 301] newfstatat(AT_FDCWD, "./3/cgroup", [pid 305] unlink("./4/cgroup" [pid 304] <... unlink resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... unlink resumed>) = 0 [pid 304] getdents64(3, [pid 301] unlink("./3/cgroup" [pid 305] getdents64(3, [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 301] <... unlink resumed>) = 0 [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 304] close(3 [pid 301] getdents64(3, [pid 305] close(3 [pid 304] <... close resumed>) = 0 [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 305] <... close resumed>) = 0 [pid 304] rmdir("./3" [pid 301] close(3 [pid 305] rmdir("./4" [pid 304] <... rmdir resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 304] mkdir("./4", 0777 [pid 301] rmdir("./3" [pid 305] mkdir("./5", 0777 [pid 304] <... mkdir resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] mkdir("./4", 0777 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... mkdir resumed>) = 0 [pid 304] <... clone resumed>, child_tidptr=0x55558827a650) = 6 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... clone resumed>, child_tidptr=0x55558827a650) = 7 [pid 301] <... clone resumed>, child_tidptr=0x55558827a650) = 6 ./strace-static-x86_64: Process 359 attached ./strace-static-x86_64: Process 358 attached ./strace-static-x86_64: Process 357 attached [pid 307] newfstatat(AT_FDCWD, "./3/cgroup", [pid 359] set_robust_list(0x55558827a660, 24 [pid 358] set_robust_list(0x55558827a660, 24 [pid 357] set_robust_list(0x55558827a660, 24 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] <... set_robust_list resumed>) = 0 [pid 358] <... set_robust_list resumed>) = 0 [pid 357] <... set_robust_list resumed>) = 0 [pid 307] unlink("./3/cgroup" [pid 359] chdir("./4" [pid 358] chdir("./5" [pid 357] chdir("./4" [pid 307] <... unlink resumed>) = 0 [pid 359] <... chdir resumed>) = 0 [pid 358] <... chdir resumed>) = 0 [pid 357] <... chdir resumed>) = 0 [pid 307] getdents64(3, [pid 359] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 359] <... prctl resumed>) = 0 [pid 358] <... prctl resumed>) = 0 [pid 357] <... prctl resumed>) = 0 [pid 359] setpgid(0, 0 [pid 307] close(3 [pid 359] <... setpgid resumed>) = 0 [pid 358] setpgid(0, 0 [pid 359] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 358] <... setpgid resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 357] setpgid(0, 0 [pid 359] <... symlink resumed>) = 0 [pid 359] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 358] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 357] <... setpgid resumed>) = 0 [pid 307] rmdir("./3" [pid 359] <... symlink resumed>) = 0 [pid 358] <... symlink resumed>) = 0 [pid 357] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 358] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 307] <... rmdir resumed>) = 0 [pid 357] <... symlink resumed>) = 0 [pid 358] <... symlink resumed>) = 0 [pid 307] mkdir("./4", 0777 [pid 359] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 358] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 357] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 307] <... mkdir resumed>) = 0 [pid 359] <... symlink resumed>) = 0 [pid 357] <... symlink resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 358] <... symlink resumed>) = 0 [pid 357] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 359] <... openat resumed>) = 3 [pid 359] write(3, "1000", 4) = 4 [pid 359] close(3) = 0 [pid 359] symlink("/dev/binderfs", "./binderfs"executing program ./strace-static-x86_64: Process 360 attached ) = 0 [pid 358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 359] write(1, "executing program\n", 18 [pid 357] <... symlink resumed>) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55558827a650) = 6 [pid 360] set_robust_list(0x55558827a660, 24 [pid 359] <... write resumed>) = 18 [pid 358] <... openat resumed>) = 3 [pid 357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 360] <... set_robust_list resumed>) = 0 [pid 359] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 358] write(3, "1000", 4 [pid 360] chdir("./4" [pid 359] <... openat resumed>) = 3 [pid 358] <... write resumed>) = 4 [pid 357] <... openat resumed>) = 3 [pid 360] <... chdir resumed>) = 0 [pid 359] setns(201, 0 [pid 358] close(3 [pid 357] write(3, "1000", 4 [pid 360] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 359] <... setns resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 357] <... write resumed>) = 4 [pid 360] <... prctl resumed>) = 0 [pid 359] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 358] symlink("/dev/binderfs", "./binderfs" [pid 357] close(3 [pid 360] setpgid(0, 0 [pid 359] <... socket resumed>) = 4 executing program [pid 358] <... symlink resumed>) = 0 [pid 360] <... setpgid resumed>) = 0 [pid 359] setns(3, 0 [pid 358] write(1, "executing program\n", 18 [pid 357] <... close resumed>) = 0 [pid 359] <... setns resumed>) = 0 [pid 359] close(3) = 0 [pid 360] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 359] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 358] <... write resumed>) = 18 [pid 357] symlink("/dev/binderfs", "./binderfs" [pid 360] <... symlink resumed>) = 0 [pid 359] <... openat resumed>) = 3 [pid 358] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 359] ioctl(3, TIOCSETD, [15]) = 0 [pid 357] <... symlink resumed>) = 0 [pid 359] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 360] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu"executing program [pid 358] <... openat resumed>) = 3 [pid 357] write(1, "executing program\n", 18 [pid 360] <... symlink resumed>) = 0 [pid 359] <... ioctl resumed>, 0x4) = 0 [pid 358] setns(201, 0 [pid 357] <... write resumed>) = 18 [pid 359] ioctl(4, HCISETLINKPOL [pid 360] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 360] write(3, "1000", 4) = 4 [pid 360] close(3) = 0 [pid 360] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 360] write(1, "executing program\n", 18) = 18 [pid 360] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 360] setns(201, 0) = 0 [pid 360] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 360] setns(3, 0) = 0 [pid 360] close(3) = 0 [pid 360] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 360] ioctl(3, TIOCSETD, [15]) = 0 [pid 358] <... setns resumed>) = 0 [pid 357] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 360] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 360] ioctl(4, HCISETLINKPOL [pid 358] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 358] setns(3, 0) = 0 [pid 358] close(3) = 0 [pid 358] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 358] ioctl(3, TIOCSETD, [15]) = 0 [pid 358] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 357] <... openat resumed>) = 3 [pid 358] ioctl(4, HCISETLINKPOL [pid 357] setns(201, 0) = 0 [pid 357] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 357] setns(3, 0) = 0 [pid 357] close(3) = 0 [pid 357] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 357] ioctl(3, TIOCSETD, [15]) = 0 [pid 357] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [ 38.193673][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.209194][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 38.215585][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 38.222391][ T43] Bluetooth: hci2: Frame reassembly failed (-84) [ 38.224096][ T10] Bluetooth: hci3: Frame reassembly failed (-84) [ 38.234658][ T8] Bluetooth: hci4: Frame reassembly failed (-84) [ 38.240927][ T8] Bluetooth: hci4: Frame reassembly failed (-84) [pid 357] ioctl(4, HCISETLINKPOL [pid 356] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 356] close(3 [pid 359] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 359] close(3 [pid 360] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 360] close(3 [pid 358] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 358] close(3 [pid 357] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [ 40.194527][ T315] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.194540][ T311] Bluetooth: hci0: command 0x1003 tx timeout [ 40.206572][ T356] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 40.212555][ T359] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 40.218540][ T360] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 40.224457][ T358] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 40.230387][ T357] Bluetooth: hci0: Opcode 0x080f failed: -22 [pid 357] close(3 [pid 356] <... close resumed>) = 0 [pid 356] close(4) = 0 [pid 356] close(5) = -1 EBADF (Bad file descriptor) [pid 356] close(6) = -1 EBADF (Bad file descriptor) [pid 356] close(7) = -1 EBADF (Bad file descriptor) [pid 356] close(8) = -1 EBADF (Bad file descriptor) [pid 356] close(9) = -1 EBADF (Bad file descriptor) [pid 356] close(10) = -1 EBADF (Bad file descriptor) [pid 356] close(11) = -1 EBADF (Bad file descriptor) [pid 356] close(12) = -1 EBADF (Bad file descriptor) [pid 356] close(13) = -1 EBADF (Bad file descriptor) [pid 356] close(14) = -1 EBADF (Bad file descriptor) [pid 356] close(15) = -1 EBADF (Bad file descriptor) [pid 356] close(16) = -1 EBADF (Bad file descriptor) [pid 356] close(17) = -1 EBADF (Bad file descriptor) [pid 356] close(18) = -1 EBADF (Bad file descriptor) [pid 356] close(19) = -1 EBADF (Bad file descriptor) [pid 356] close(20) = -1 EBADF (Bad file descriptor) [pid 356] close(21) = -1 EBADF (Bad file descriptor) [pid 356] close(22) = -1 EBADF (Bad file descriptor) [pid 356] close(23) = -1 EBADF (Bad file descriptor) [pid 356] close(24) = -1 EBADF (Bad file descriptor) [pid 356] close(25) = -1 EBADF (Bad file descriptor) [pid 356] close(26) = -1 EBADF (Bad file descriptor) [pid 356] close(27) = -1 EBADF (Bad file descriptor) [pid 356] close(28) = -1 EBADF (Bad file descriptor) [pid 356] close(29) = -1 EBADF (Bad file descriptor) [pid 356] exit_group(0) = ? [pid 356] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 357] <... close resumed>) = 0 [pid 357] close(4) = 0 [pid 357] close(5) = -1 EBADF (Bad file descriptor) [pid 357] close(6) = -1 EBADF (Bad file descriptor) [pid 357] close(7) = -1 EBADF (Bad file descriptor) [pid 357] close(8) = -1 EBADF (Bad file descriptor) [pid 357] close(9) = -1 EBADF (Bad file descriptor) [pid 357] close(10) = -1 EBADF (Bad file descriptor) [pid 357] close(11) = -1 EBADF (Bad file descriptor) [pid 357] close(12) = -1 EBADF (Bad file descriptor) [pid 357] close(13) = -1 EBADF (Bad file descriptor) [pid 357] close(14) = -1 EBADF (Bad file descriptor) [pid 357] close(15) = -1 EBADF (Bad file descriptor) [pid 357] close(16) = -1 EBADF (Bad file descriptor) [pid 357] close(17) = -1 EBADF (Bad file descriptor) [pid 357] close(18) = -1 EBADF (Bad file descriptor) [pid 357] close(19) = -1 EBADF (Bad file descriptor) [pid 357] close(20) = -1 EBADF (Bad file descriptor) [pid 357] close(21) = -1 EBADF (Bad file descriptor) [pid 357] close(22) = -1 EBADF (Bad file descriptor) [pid 357] close(23) = -1 EBADF (Bad file descriptor) [pid 357] close(24) = -1 EBADF (Bad file descriptor) [pid 357] close(25) = -1 EBADF (Bad file descriptor) [pid 357] close(26) = -1 EBADF (Bad file descriptor) [pid 357] close(27) = -1 EBADF (Bad file descriptor) [pid 357] close(28) = -1 EBADF (Bad file descriptor) [pid 357] close(29) = -1 EBADF (Bad file descriptor) [pid 357] exit_group(0) = ? [pid 357] +++ exited with 0 +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 306] <... restart_syscall resumed>) = 0 [pid 306] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... close resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] close(4 [pid 306] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] <... close resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 360] close(5 [pid 306] newfstatat(3, "", [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] <... close resumed>) = 0 [pid 306] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 360] close(6 [pid 358] close(4 [pid 306] getdents64(3, [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] <... close resumed>) = 0 [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 360] close(7 [pid 358] <... close resumed>) = 0 [pid 306] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(4 [pid 358] close(5 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] close(8 [pid 306] newfstatat(AT_FDCWD, "./5/binderfs", [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] close(9 [pid 306] unlink("./5/binderfs" [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... unlink resumed>) = 0 [pid 360] close(10 [pid 306] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] close(11 [pid 306] newfstatat(AT_FDCWD, "./5/cgroup.net", [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] close(12 [pid 306] unlink("./5/cgroup.net" [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... unlink resumed>) = 0 [pid 360] close(13 [pid 306] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] close(14 [pid 306] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] <... restart_syscall resumed>) = 0 [pid 360] close(15 [pid 306] unlink("./5/cgroup.cpu" [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... unlink resumed>) = 0 [pid 360] close(16 [pid 306] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] <... close resumed>) = 0 [pid 358] close(6 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] close(17 [pid 306] newfstatat(AT_FDCWD, "./5/cgroup", [pid 304] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] <... openat resumed>) = 3 [pid 360] close(18 [pid 359] close(5 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] unlink("./5/cgroup" [pid 304] newfstatat(3, "", [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... unlink resumed>) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 360] close(19 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(7 [pid 306] getdents64(3, [pid 304] getdents64(3, [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 360] close(20 [pid 306] close(3 [pid 304] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = 0 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] close(21 [pid 306] rmdir("./5" [pid 304] newfstatat(AT_FDCWD, "./4/binderfs", [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... rmdir resumed>) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] close(22 [pid 306] mkdir("./6", 0777 [pid 304] unlink("./4/binderfs" [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... mkdir resumed>) = 0 [pid 304] <... unlink resumed>) = 0 [pid 360] close(23 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 364 attached [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(6 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] set_robust_list(0x55558827a660, 24 [pid 360] close(24 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(8 [pid 306] <... clone resumed>, child_tidptr=0x55558827a650) = 8 [pid 304] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 364] <... set_robust_list resumed>) = 0 [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(7 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 364] chdir("./6" [pid 360] close(25 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(9 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] <... chdir resumed>) = 0 [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(8 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] unlink("./4/cgroup.net" [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 360] close(26 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(10 [pid 364] <... prctl resumed>) = 0 [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(9 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... unlink resumed>) = 0 [pid 364] setpgid(0, 0 [pid 360] close(27 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(11 [pid 304] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... setpgid resumed>) = 0 [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(10 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(12 [pid 364] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 360] close(28 [pid 359] close(11 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 364] <... symlink resumed>) = 0 [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(13 [pid 364] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 360] close(29 [pid 359] close(12 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] <... symlink resumed>) = 0 [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(14 [pid 304] unlink("./4/cgroup.cpu" [pid 364] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 360] exit_group(0 [pid 359] close(13 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 364] <... symlink resumed>) = 0 [pid 358] close(15 [pid 304] <... unlink resumed>) = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 360] <... exit_group resumed>) = ? [pid 359] close(14 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... openat resumed>) = 3 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(16 [pid 359] close(15 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(17 [pid 359] close(16 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(18 [pid 359] close(17 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(19 [pid 359] close(18 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 360] +++ exited with 0 +++ [pid 364] write(3, "1000", 4 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(20 [pid 364] <... write resumed>) = 4 [pid 359] close(19 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] close(3 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(21 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 304] newfstatat(AT_FDCWD, "./4/cgroup", [pid 364] <... close resumed>) = 0 [pid 359] close(20 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] symlink("/dev/binderfs", "./binderfs" [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(22 [pid 307] <... restart_syscall resumed>) = 0 [pid 304] unlink("./4/cgroup" [pid 364] <... symlink resumed>) = 0 [pid 359] close(21 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 364] write(1, "executing program\n", 18 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(23 [pid 304] <... unlink resumed>) = 0 [pid 364] <... write resumed>) = 18 [pid 359] close(22 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] getdents64(3, [pid 364] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(24 [pid 307] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 359] close(23 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 364] <... openat resumed>) = 3 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(25 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] close(3 [pid 364] setns(201, 0 [pid 359] close(24 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 364] <... setns resumed>) = 0 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(26 [pid 304] <... close resumed>) = 0 [pid 364] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 359] close(25 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... openat resumed>) = 3 [pid 304] rmdir("./4" [pid 364] <... socket resumed>) = 4 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(27 [pid 307] newfstatat(3, "", [pid 364] setns(3, 0 [pid 359] close(26 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... rmdir resumed>) = 0 [pid 364] <... setns resumed>) = 0 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(28 [pid 307] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 304] mkdir("./5", 0777 [pid 364] close(3 [pid 359] close(27 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] getdents64(3, [pid 364] <... close resumed>) = 0 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(29 [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 304] <... mkdir resumed>) = 0 [pid 364] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 359] close(28 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] exit_group(0 [pid 359] close(29 [pid 358] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 365 attached [pid 364] <... openat resumed>) = 3 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] +++ exited with 0 +++ [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] set_robust_list(0x55558827a660, 24 [pid 364] ioctl(3, TIOCSETD, [15] [pid 359] exit_group(0 [pid 307] newfstatat(AT_FDCWD, "./4/binderfs", [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 304] <... clone resumed>, child_tidptr=0x55558827a650) = 7 [pid 365] <... set_robust_list resumed>) = 0 [pid 364] <... ioctl resumed>) = 0 [pid 359] <... exit_group resumed>) = ? [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] restart_syscall(<... resuming interrupted clone ...> [ 40.274514][ T315] Bluetooth: hci4: command 0x1003 tx timeout [ 40.274514][ T323] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 40.274565][ T318] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 40.280515][ T315] Bluetooth: hci3: command 0x1003 tx timeout [ 40.286368][ T323] Bluetooth: hci2: command 0x1003 tx timeout [ 40.292149][ T317] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 40.298078][ T323] Bluetooth: hci1: command 0x1003 tx timeout [ 40.303777][ T309] Bluetooth: hci1: Opcode 0x1003 failed: -110 [pid 365] chdir("./5" [pid 364] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 307] unlink("./4/binderfs" [pid 365] <... chdir resumed>) = 0 [pid 359] +++ exited with 0 +++ [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 364] <... ioctl resumed>, 0x4) = 0 [pid 307] <... unlink resumed>) = 0 [pid 365] <... prctl resumed>) = 0 [pid 365] setpgid(0, 0) = 0 [pid 365] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 365] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 365] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 365] write(3, "1000", 4) = 4 [pid 365] close(3) = 0 [pid 365] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 365] write(1, "executing program\n", 18) = 18 [pid 365] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 365] setns(201, 0) = 0 [pid 365] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 365] setns(3, 0) = 0 [pid 365] close(3) = 0 [pid 365] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 364] ioctl(4, HCISETLINKPOL [pid 307] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... restart_syscall resumed>) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 365] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] ioctl(3, TIOCSETD, [15] [pid 307] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 365] <... ioctl resumed>) = 0 [pid 365] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./4/cgroup.net" [pid 305] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... restart_syscall resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] <... ioctl resumed>, 0x4) = 0 [pid 307] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 365] ioctl(4, HCISETLINKPOL [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./4/cgroup.cpu") = 0 [pid 307] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./4/cgroup") = 0 [pid 307] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./4") = 0 [pid 307] mkdir("./5", 0777) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 7 ./strace-static-x86_64: Process 366 attached [pid 305] <... openat resumed>) = 3 [pid 366] set_robust_list(0x55558827a660, 24 [pid 305] newfstatat(3, "", [pid 301] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 366] <... set_robust_list resumed>) = 0 [pid 366] chdir("./5") = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0) = 0 [pid 366] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 366] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 366] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 366] write(3, "1000", 4) = 4 [pid 366] close(3) = 0 [pid 366] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 366] write(1, "executing program\n", 18) = 18 [pid 366] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 366] setns(201, 0) = 0 [pid 366] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 366] setns(3, 0) = 0 [pid 366] close(3) = 0 [pid 366] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 305] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 366] ioctl(3, TIOCSETD, [15]) = 0 [pid 305] getdents64(3, [pid 301] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 366] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 305] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... openat resumed>) = 3 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(3, "", [pid 305] newfstatat(AT_FDCWD, "./5/binderfs", [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 366] <... ioctl resumed>, 0x4) = 0 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 366] ioctl(4, HCISETLINKPOL [pid 301] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 301] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./4/binderfs") = 0 [pid 301] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./4/cgroup.net") = 0 [pid 301] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./4/cgroup.cpu") = 0 [pid 301] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./4/cgroup") = 0 [pid 301] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 305] unlink("./5/binderfs" [pid 301] close(3) = 0 [pid 301] rmdir("./4") = 0 [pid 301] mkdir("./5", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 7 [pid 305] <... unlink resumed>) = 0 [pid 305] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./5/cgroup.net") = 0 [pid 305] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./5/cgroup.cpu") = 0 [pid 305] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./5/cgroup") = 0 [pid 305] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./5") = 0 [pid 305] mkdir("./6", 0777./strace-static-x86_64: Process 367 attached ) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 367] set_robust_list(0x55558827a660, 24./strace-static-x86_64: Process 368 attached ) = 0 [pid 368] set_robust_list(0x55558827a660, 24 [pid 367] chdir("./5" [pid 305] <... clone resumed>, child_tidptr=0x55558827a650) = 8 [pid 368] <... set_robust_list resumed>) = 0 [pid 367] <... chdir resumed>) = 0 [pid 367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] chdir("./6" [pid 367] setpgid(0, 0) = 0 [pid 368] <... chdir resumed>) = 0 [pid 367] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 367] <... symlink resumed>) = 0 [pid 367] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 368] <... prctl resumed>) = 0 [pid 367] <... symlink resumed>) = 0 [pid 367] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 368] setpgid(0, 0 [pid 367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 368] <... setpgid resumed>) = 0 [pid 367] <... openat resumed>) = 3 [pid 367] write(3, "1000", 4) = 4 [pid 367] close(3) = 0 [pid 367] symlink("/dev/binderfs", "./binderfs" [pid 368] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 367] <... symlink resumed>) = 0 [pid 367] write(1, "executing program\n", 18executing program [pid 368] <... symlink resumed>) = 0 [pid 367] <... write resumed>) = 18 [pid 368] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 367] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 368] <... symlink resumed>) = 0 [pid 367] <... openat resumed>) = 3 [pid 368] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 367] setns(201, 0) = 0 [pid 367] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 368] <... symlink resumed>) = 0 [pid 367] <... socket resumed>) = 4 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 367] setns(3, 0) = 0 [pid 367] close(3 [pid 368] <... openat resumed>) = 3 [pid 367] <... close resumed>) = 0 [pid 368] write(3, "1000", 4 [pid 367] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 368] <... write resumed>) = 4 [pid 368] close(3 [pid 367] <... openat resumed>) = 3 [pid 368] <... close resumed>) = 0 [pid 368] symlink("/dev/binderfs", "./binderfs" [pid 367] ioctl(3, TIOCSETD, [15] [pid 368] <... symlink resumed>) = 0 [pid 367] <... ioctl resumed>) = 0 [pid 367] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4)executing program [pid 368] write(1, "executing program\n", 18) = 18 [pid 367] <... ioctl resumed>, 0x4) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 368] setns(201, 0) = 0 [pid 368] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 368] setns(3, 0) = 0 [pid 368] close(3) = 0 [pid 368] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 368] ioctl(3, TIOCSETD, [15]) = 0 [pid 368] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 367] ioctl(4, HCISETLINKPOL [ 40.342825][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.351156][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 40.358072][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 40.365962][ T43] Bluetooth: hci2: Frame reassembly failed (-84) [ 40.372179][ T43] Bluetooth: hci2: Frame reassembly failed (-84) [ 40.384776][ T43] Bluetooth: hci3: Frame reassembly failed (-84) [ 40.391124][ T43] Bluetooth: hci4: Frame reassembly failed (-84) [pid 368] ioctl(4, HCISETLINKPOL [pid 364] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 364] close(3 [pid 365] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 365] close(3) = 0 [pid 365] close(4) = 0 [pid 365] close(5) = -1 EBADF (Bad file descriptor) [pid 365] close(6) = -1 EBADF (Bad file descriptor) [pid 365] close(7) = -1 EBADF (Bad file descriptor) [pid 365] close(8) = -1 EBADF (Bad file descriptor) [pid 365] close(9) = -1 EBADF (Bad file descriptor) [pid 365] close(10) = -1 EBADF (Bad file descriptor) [pid 365] close(11) = -1 EBADF (Bad file descriptor) [pid 365] close(12) = -1 EBADF (Bad file descriptor) [pid 365] close(13) = -1 EBADF (Bad file descriptor) [pid 365] close(14) = -1 EBADF (Bad file descriptor) [pid 365] close(15) = -1 EBADF (Bad file descriptor) [pid 365] close(16) = -1 EBADF (Bad file descriptor) [pid 365] close(17) = -1 EBADF (Bad file descriptor) [pid 365] close(18) = -1 EBADF (Bad file descriptor) [pid 365] close(19) = -1 EBADF (Bad file descriptor) [pid 365] close(20) = -1 EBADF (Bad file descriptor) [pid 365] close(21) = -1 EBADF (Bad file descriptor) [pid 365] close(22) = -1 EBADF (Bad file descriptor) [pid 365] close(23) = -1 EBADF (Bad file descriptor) [pid 365] close(24) = -1 EBADF (Bad file descriptor) [pid 365] close(25) = -1 EBADF (Bad file descriptor) [pid 365] close(26) = -1 EBADF (Bad file descriptor) [pid 365] close(27) = -1 EBADF (Bad file descriptor) [pid 365] close(28) = -1 EBADF (Bad file descriptor) [pid 365] close(29) = -1 EBADF (Bad file descriptor) [pid 365] exit_group(0) = ? [pid 365] +++ exited with 0 +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 42.354527][ T315] Bluetooth: hci1: command 0x1003 tx timeout [ 42.354524][ T309] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.354559][ T315] Bluetooth: hci0: command 0x1003 tx timeout [ 42.360502][ T311] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 42.367196][ T364] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 42.384072][ T365] Bluetooth: hci0: Opcode 0x080f failed: -22 [pid 304] restart_syscall(<... resuming interrupted clone ...>executing program ) = 0 [pid 304] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 304] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 304] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 304] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./5/binderfs") = 0 [pid 304] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./5/cgroup.net") = 0 [pid 304] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./5/cgroup.cpu") = 0 [pid 304] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./5/cgroup") = 0 [pid 304] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [pid 304] rmdir("./5") = 0 [pid 304] mkdir("./6", 0777) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 371 attached [pid 371] set_robust_list(0x55558827a660, 24 [pid 304] <... clone resumed>, child_tidptr=0x55558827a650) = 8 [pid 371] <... set_robust_list resumed>) = 0 [pid 371] chdir("./6") = 0 [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 371] setpgid(0, 0) = 0 [pid 371] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 371] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 371] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "1000", 4) = 4 [pid 371] close(3) = 0 [pid 371] symlink("/dev/binderfs", "./binderfs") = 0 [pid 371] write(1, "executing program\n", 18) = 18 [pid 371] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 371] setns(201, 0) = 0 [pid 371] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 371] setns(3, 0) = 0 [pid 371] close(3) = 0 [pid 371] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 371] ioctl(3, TIOCSETD, [15]) = 0 [pid 371] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 371] ioctl(4, HCISETLINKPOL, 0x400000000300) = -1 ENODEV (No such device) [ 42.434475][ T311] Bluetooth: hci4: command 0x1003 tx timeout [ 42.434524][ T318] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 42.440329][ T311] Bluetooth: hci3: command 0x1003 tx timeout [ 42.446234][ T309] Bluetooth: hci2: command 0x1003 tx timeout [ 42.457895][ T323] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 42.462352][ T317] Bluetooth: hci2: Opcode 0x1003 failed: -110 [pid 371] close(3 [pid 366] <... ioctl resumed>, 0x400000000300) = -1 ETIMEDOUT (Connection timed out) [pid 366] close(3 [pid 368] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 368] close(3 [pid 367] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 367] close(3 [pid 364] <... close resumed>) = 0 [pid 364] close(4) = 0 [pid 364] close(5) = -1 EBADF (Bad file descriptor) [pid 364] close(6) = -1 EBADF (Bad file descriptor) [pid 364] close(7) = -1 EBADF (Bad file descriptor) [pid 364] close(8) = -1 EBADF (Bad file descriptor) [pid 364] close(9) = -1 EBADF (Bad file descriptor) [pid 364] close(10) = -1 EBADF (Bad file descriptor) [pid 364] close(11) = -1 EBADF (Bad file descriptor) [pid 364] close(12) = -1 EBADF (Bad file descriptor) [pid 364] close(13) = -1 EBADF (Bad file descriptor) [pid 364] close(14) = -1 EBADF (Bad file descriptor) [pid 364] close(15) = -1 EBADF (Bad file descriptor) [pid 364] close(16) = -1 EBADF (Bad file descriptor) [pid 364] close(17) = -1 EBADF (Bad file descriptor) [pid 364] close(18) = -1 EBADF (Bad file descriptor) [pid 364] close(19) = -1 EBADF (Bad file descriptor) [pid 364] close(20) = -1 EBADF (Bad file descriptor) [pid 364] close(21) = -1 EBADF (Bad file descriptor) [pid 364] close(22) = -1 EBADF (Bad file descriptor) [pid 364] close(23) = -1 EBADF (Bad file descriptor) [pid 364] close(24) = -1 EBADF (Bad file descriptor) [pid 364] close(25) = -1 EBADF (Bad file descriptor) [pid 364] close(26) = -1 EBADF (Bad file descriptor) [pid 364] close(27) = -1 EBADF (Bad file descriptor) [pid 364] close(28) = -1 EBADF (Bad file descriptor) [pid 364] close(29) = -1 EBADF (Bad file descriptor) [pid 364] exit_group(0) = ? [pid 364] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 306] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 306] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./6/binderfs") = 0 [pid 306] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./6/cgroup.net") = 0 [pid 306] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./6/cgroup.cpu") = 0 [pid 306] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./6/cgroup") = 0 [pid 306] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./6") = 0 [pid 306] mkdir("./7", 0777) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 9 ./strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x55558827a660, 24) = 0 [pid 374] chdir("./7") = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 374] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 374] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 374] close(3) = 0 [pid 374] symlink("/dev/binderfs", "./binderfs") = 0 [pid 374] write(1, "executing program\n", 18executing program ) = 18 [pid 374] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 374] setns(201, 0) = 0 [pid 374] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 374] setns(3, 0) = 0 [pid 374] close(3) = 0 [pid 374] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 374] ioctl(3, TIOCSETD, [15]) = 0 [pid 374] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [ 44.434527][ T317] Bluetooth: hci0: command 0x080f tx timeout [ 44.434526][ T366] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 44.446345][ T368] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 44.452632][ T367] Bluetooth: hci0: Opcode 0x080f failed: -22 [pid 374] ioctl(4, HCISETLINKPOL [pid 368] <... close resumed>) = 0 [pid 368] close(4) = 0 [pid 368] close(5) = -1 EBADF (Bad file descriptor) [pid 368] close(6) = -1 EBADF (Bad file descriptor) [pid 368] close(7) = -1 EBADF (Bad file descriptor) [pid 368] close(8) = -1 EBADF (Bad file descriptor) [pid 368] close(9) = -1 EBADF (Bad file descriptor) [pid 368] close(10) = -1 EBADF (Bad file descriptor) [pid 368] close(11) = -1 EBADF (Bad file descriptor) [pid 368] close(12) = -1 EBADF (Bad file descriptor) [pid 368] close(13) = -1 EBADF (Bad file descriptor) [pid 368] close(14) = -1 EBADF (Bad file descriptor) [pid 368] close(15) = -1 EBADF (Bad file descriptor) [pid 368] close(16) = -1 EBADF (Bad file descriptor) [pid 368] close(17) = -1 EBADF (Bad file descriptor) [pid 368] close(18) = -1 EBADF (Bad file descriptor) [pid 368] close(19) = -1 EBADF (Bad file descriptor) [pid 368] close(20) = -1 EBADF (Bad file descriptor) [pid 368] close(21) = -1 EBADF (Bad file descriptor) [pid 368] close(22) = -1 EBADF (Bad file descriptor) [pid 368] close(23) = -1 EBADF (Bad file descriptor) [pid 368] close(24) = -1 EBADF (Bad file descriptor) [pid 368] close(25) = -1 EBADF (Bad file descriptor) [pid 368] close(26) = -1 EBADF (Bad file descriptor) [pid 368] close(27) = -1 EBADF (Bad file descriptor) [pid 368] close(28) = -1 EBADF (Bad file descriptor) [pid 368] close(29) = -1 EBADF (Bad file descriptor) [pid 368] exit_group(0) = ? [pid 368] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>executing program ) = 0 [pid 305] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 305] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 305] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./6/binderfs") = 0 [pid 305] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./6/cgroup.net") = 0 [pid 305] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./6/cgroup.cpu") = 0 [pid 305] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./6/cgroup") = 0 [pid 305] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./6") = 0 [pid 305] mkdir("./7", 0777) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 375 attached [pid 375] set_robust_list(0x55558827a660, 24 [pid 305] <... clone resumed>, child_tidptr=0x55558827a650) = 9 [pid 375] <... set_robust_list resumed>) = 0 [pid 375] chdir("./7") = 0 [pid 375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 375] setpgid(0, 0) = 0 [pid 375] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 375] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 375] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 375] write(3, "1000", 4) = 4 [pid 375] close(3) = 0 [pid 375] symlink("/dev/binderfs", "./binderfs") = 0 [pid 375] write(1, "executing program\n", 18) = 18 [pid 375] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 375] setns(201, 0) = 0 [pid 375] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 375] setns(3, 0) = 0 [pid 375] close(3) = 0 [pid 375] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 375] ioctl(3, TIOCSETD, [15]) = 0 [pid 375] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 375] ioctl(4, HCISETLINKPOL [pid 371] <... close resumed>) = 0 [pid 371] close(4) = 0 [pid 371] close(5) = -1 EBADF (Bad file descriptor) [pid 371] close(6) = -1 EBADF (Bad file descriptor) [pid 371] close(7) = -1 EBADF (Bad file descriptor) [pid 371] close(8) = -1 EBADF (Bad file descriptor) [pid 371] close(9) = -1 EBADF (Bad file descriptor) [pid 371] close(10) = -1 EBADF (Bad file descriptor) [pid 371] close(11) = -1 EBADF (Bad file descriptor) [pid 371] close(12) = -1 EBADF (Bad file descriptor) [pid 371] close(13) = -1 EBADF (Bad file descriptor) [pid 371] close(14) = -1 EBADF (Bad file descriptor) [pid 371] close(15) = -1 EBADF (Bad file descriptor) [pid 371] close(16) = -1 EBADF (Bad file descriptor) [pid 371] close(17) = -1 EBADF (Bad file descriptor) [pid 371] close(18) = -1 EBADF (Bad file descriptor) [pid 371] close(19) = -1 EBADF (Bad file descriptor) [pid 371] close(20) = -1 EBADF (Bad file descriptor) [pid 371] close(21) = -1 EBADF (Bad file descriptor) [ 44.482811][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.489142][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.514483][ T317] Bluetooth: hci1: command 0x1003 tx timeout [ 44.514483][ T311] Bluetooth: hci1: Opcode 0x1003 failed: -110 [pid 371] close(22) = -1 EBADF (Bad file descriptor) [pid 371] close(23) = -1 EBADF (Bad file descriptor) [pid 371] close(24) = -1 EBADF (Bad file descriptor) [pid 371] close(25) = -1 EBADF (Bad file descriptor) [pid 371] close(26) = -1 EBADF (Bad file descriptor) [pid 371] close(27) = -1 EBADF (Bad file descriptor) [pid 371] close(28) = -1 EBADF (Bad file descriptor) [pid 371] close(29) = -1 EBADF (Bad file descriptor) [pid 371] exit_group(0) = ? [pid 371] +++ exited with 0 +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 304] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 304] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 304] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 304] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./6/binderfs") = 0 [pid 304] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./6/cgroup.net") = 0 [pid 304] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./6/cgroup.cpu") = 0 [pid 304] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./6/cgroup") = 0 [pid 304] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [pid 366] <... close resumed>) = 0 [pid 304] rmdir("./6" [pid 367] <... close resumed>) = 0 [pid 366] close(4 [pid 304] <... rmdir resumed>) = 0 [pid 304] mkdir("./7", 0777 [pid 367] close(4 [pid 366] <... close resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 367] <... close resumed>) = 0 [pid 366] close(5./strace-static-x86_64: Process 376 attached [pid 367] close(5 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... clone resumed>, child_tidptr=0x55558827a650) = 9 [pid 376] set_robust_list(0x55558827a660, 24 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(6 [pid 376] <... set_robust_list resumed>) = 0 [pid 367] close(6 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] chdir("./7" [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(7 [pid 376] <... chdir resumed>) = 0 [pid 367] close(7 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(8 [pid 376] <... prctl resumed>) = 0 [pid 367] close(8 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] setpgid(0, 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(9 [pid 376] <... setpgid resumed>) = 0 [pid 367] close(9 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(10 [pid 376] <... symlink resumed>) = 0 [pid 376] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 367] close(10 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... symlink resumed>) = 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(11 [pid 376] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 367] close(11 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... symlink resumed>) = 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(12 [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 367] close(12 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... openat resumed>) = 3 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(13 [pid 376] write(3, "1000", 4 [pid 367] close(13) = -1 EBADF (Bad file descriptor) [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... write resumed>) = 4 [pid 367] close(14 [pid 366] close(14 [pid 376] close(3 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(15) = -1 EBADF (Bad file descriptor) [pid 367] close(16 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(15 [pid 376] symlink("/dev/binderfs", "./binderfs" [pid 367] close(17 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(18 [pid 376] <... symlink resumed>) = 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(16executing program [pid 376] write(1, "executing program\n", 18 [pid 367] close(19 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... write resumed>) = 18 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(17 [pid 376] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 367] close(20 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(21) = -1 EBADF (Bad file descriptor) [pid 367] close(22 [pid 376] <... openat resumed>) = 3 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(23) = -1 EBADF (Bad file descriptor) [pid 366] close(18 [pid 376] setns(201, 0 [pid 367] close(24 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... setns resumed>) = 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(19 [pid 376] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 367] close(25 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(26 [pid 376] <... socket resumed>) = 4 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(20 [pid 376] setns(3, 0 [pid 367] close(27 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... setns resumed>) = 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(3 [pid 367] close(28 [pid 366] close(21 [pid 376] <... close resumed>) = 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(29 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(22 [pid 367] exit_group(0) = ? [pid 376] <... openat resumed>) = 3 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] ioctl(3, TIOCSETD, [15] [pid 367] +++ exited with 0 +++ [pid 366] close(23 [pid 376] <... ioctl resumed>) = 0 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 376] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 366] close(24 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] close(25) = -1 EBADF (Bad file descriptor) [pid 366] close(26) = -1 EBADF (Bad file descriptor) [pid 366] close(27) = -1 EBADF (Bad file descriptor) [pid 366] close(28) = -1 EBADF (Bad file descriptor) [pid 376] <... ioctl resumed>, 0x4) = 0 [pid 366] close(29 [pid 376] ioctl(4, HCISETLINKPOL [pid 301] <... restart_syscall resumed>) = 0 [pid 366] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 366] exit_group(0) = ? [pid 301] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 366] +++ exited with 0 +++ [pid 301] newfstatat(3, "", [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 301] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 301] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./5/binderfs") = 0 [pid 301] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./5/cgroup.net") = 0 [pid 301] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./5/cgroup.cpu") = 0 [pid 301] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./5/cgroup") = 0 [pid 301] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./5") = 0 [pid 301] mkdir("./6", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 377 attached , child_tidptr=0x55558827a650) = 8 [pid 377] set_robust_list(0x55558827a660, 24) = 0 [pid 377] chdir("./6") = 0 [pid 377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 377] setpgid(0, 0) = 0 [pid 377] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 377] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 377] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 377] write(3, "1000", 4) = 4 [pid 377] close(3) = 0 [pid 377] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 377] write(1, "executing program\n", 18) = 18 [pid 377] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 377] setns(201, 0) = 0 [pid 377] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 377] setns(3, 0) = 0 [pid 377] close(3) = 0 [pid 377] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 377] ioctl(3, TIOCSETD, [15]) = 0 [pid 377] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 307] <... restart_syscall resumed>) = 0 [pid 377] <... ioctl resumed>, 0x4) = 0 [pid 307] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 377] ioctl(4, HCISETLINKPOL [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 307] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 307] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./5/binderfs") = 0 [pid 307] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./5/cgroup.net") = 0 [pid 307] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./5/cgroup.cpu") = 0 [pid 307] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./5/cgroup") = 0 [pid 307] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./5") = 0 [pid 307] mkdir("./6", 0777) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x55558827a660, 24 [pid 307] <... clone resumed>, child_tidptr=0x55558827a650) = 8 [pid 378] <... set_robust_list resumed>) = 0 [pid 378] chdir("./6") = 0 [ 44.527585][ T43] Bluetooth: hci2: Frame reassembly failed (-84) [ 44.534294][ T43] Bluetooth: hci2: Frame reassembly failed (-84) [ 44.551675][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 44.558043][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 44.576674][ T43] Bluetooth: hci3: Frame reassembly failed (-84) [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 378] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 378] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 378] write(1, "executing program\n", 18) = 18 [pid 378] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 378] setns(201, 0) = 0 [pid 378] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 378] setns(3, 0) = 0 [pid 378] close(3) = 0 [pid 378] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 378] ioctl(3, TIOCSETD, [15]) = 0 [pid 378] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [ 44.582917][ T43] Bluetooth: hci3: Frame reassembly failed (-84) [ 44.590697][ T8] Bluetooth: hci4: Frame reassembly failed (-84) [ 44.596923][ T8] Bluetooth: hci4: Frame reassembly failed (-84) [pid 378] ioctl(4, HCISETLINKPOL [pid 374] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 374] close(3 [pid 375] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 375] close(3 [pid 376] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 376] close(3 [pid 377] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 377] close(3 [pid 378] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [ 46.514494][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.514503][ T315] Bluetooth: hci0: command 0x1003 tx timeout [ 46.526337][ T374] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 46.532567][ T375] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 46.538529][ T376] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 46.544507][ T377] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 46.550593][ T378] Bluetooth: hci0: Opcode 0x080f failed: -22 [pid 378] close(3) = 0 [pid 376] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 378] close(4 [pid 377] close(4 [pid 376] close(4 [pid 375] <... close resumed>) = 0 [pid 375] close(4) = 0 [pid 375] close(5) = -1 EBADF (Bad file descriptor) [pid 375] close(6) = -1 EBADF (Bad file descriptor) [pid 375] close(7) = -1 EBADF (Bad file descriptor) [pid 375] close(8 [pid 377] <... close resumed>) = 0 [pid 375] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = 0 [pid 375] close(9 [pid 378] <... close resumed>) = 0 [pid 377] close(5 [pid 375] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] close(10) = -1 EBADF (Bad file descriptor) [pid 375] close(11) = -1 EBADF (Bad file descriptor) [pid 375] close(12) = -1 EBADF (Bad file descriptor) [pid 375] close(13) = -1 EBADF (Bad file descriptor) [pid 375] close(14) = -1 EBADF (Bad file descriptor) [pid 375] close(15) = -1 EBADF (Bad file descriptor) [pid 375] close(16) = -1 EBADF (Bad file descriptor) [pid 375] close(17) = -1 EBADF (Bad file descriptor) [pid 375] close(18) = -1 EBADF (Bad file descriptor) [pid 375] close(19) = -1 EBADF (Bad file descriptor) [pid 375] close(20) = -1 EBADF (Bad file descriptor) [pid 375] close(21) = -1 EBADF (Bad file descriptor) [pid 375] close(22) = -1 EBADF (Bad file descriptor) [pid 375] close(23) = -1 EBADF (Bad file descriptor) [pid 375] close(24) = -1 EBADF (Bad file descriptor) [pid 375] close(25) = -1 EBADF (Bad file descriptor) [pid 375] close(26) = -1 EBADF (Bad file descriptor) [pid 378] close(5 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(5 [pid 375] close(27 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(6 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] close(28) = -1 EBADF (Bad file descriptor) [pid 375] close(29) = -1 EBADF (Bad file descriptor) [pid 378] close(6 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(6 [pid 375] exit_group(0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(7 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] <... exit_group resumed>) = ? [pid 378] close(7 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(7 [pid 374] close(4 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(8 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 375] +++ exited with 0 +++ [pid 378] close(8 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(8 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(9 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 374] <... close resumed>) = 0 [pid 378] close(9 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(9 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(10 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(10 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(11 [pid 376] close(10 [pid 378] close(11 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(12 [pid 374] close(5 [pid 378] close(12 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(11 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(13 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(13 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(12 [pid 374] close(6 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(14 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(14 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(15 [pid 376] close(13 [pid 374] close(7 [pid 378] close(15 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(16 [pid 376] close(14 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(16 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(17 [pid 376] close(15 [pid 374] close(8 [pid 378] close(17 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(18 [pid 376] close(16 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(18 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(19 [pid 376] close(17 [pid 374] close(9 [pid 378] close(19 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(20 [pid 376] close(18 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] close(20 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... restart_syscall resumed>) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(21 [pid 376] close(19 [pid 374] close(10 [pid 378] close(21 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(22 [pid 376] close(20 [pid 374] close(11 [pid 378] close(22 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(23 [pid 376] close(21 [pid 374] close(12 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 378] close(23 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(24 [pid 376] close(22 [pid 374] close(13 [pid 305] <... openat resumed>) = 3 [pid 378] close(24 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] newfstatat(3, "", [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(25 [pid 376] close(23 [pid 374] close(14 [pid 305] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 378] close(25 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] getdents64(3, [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(26 [pid 376] close(24 [pid 374] close(15 [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 378] close(26 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(27 [pid 376] close(25 [pid 374] close(16 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 378] close(27 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] newfstatat(AT_FDCWD, "./7/binderfs", [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(28 [pid 376] close(26 [pid 374] close(17 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 378] close(28 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] unlink("./7/binderfs" [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] close(29 [pid 376] close(27 [pid 374] close(18 [pid 305] <... unlink resumed>) = 0 [pid 378] close(29 [pid 377] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] exit_group(0 [pid 376] close(28 [pid 374] close(19 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 378] exit_group(0 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 377] <... exit_group resumed>) = ? [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 378] <... exit_group resumed>) = ? [pid 376] close(29 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./7/cgroup.net") = 0 [pid 305] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 377] +++ exited with 0 +++ [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 374] close(20 [pid 305] unlink("./7/cgroup.cpu" [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 305] <... unlink resumed>) = 0 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 305] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./7/cgroup" [pid 378] +++ exited with 0 +++ [pid 376] exit_group(0 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 305] <... unlink resumed>) = 0 [pid 376] <... exit_group resumed>) = ? [pid 374] close(21 [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 305] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./7") = 0 [pid 305] mkdir("./8", 0777) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 381 attached [pid 376] +++ exited with 0 +++ [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] set_robust_list(0x55558827a660, 24 [pid 374] close(22 [pid 305] <... clone resumed>, child_tidptr=0x55558827a650) = 10 [pid 381] <... set_robust_list resumed>) = 0 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 381] chdir("./8" [pid 374] close(23 [pid 381] <... chdir resumed>) = 0 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] close(24 [pid 381] <... prctl resumed>) = 0 [pid 381] setpgid(0, 0 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... setpgid resumed>) = 0 [pid 374] close(25 [pid 381] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... symlink resumed>) = 0 [pid 374] close(26 [pid 381] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... symlink resumed>) = 0 [pid 374] close(27 [pid 381] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... symlink resumed>) = 0 [pid 374] close(28 [pid 381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... openat resumed>) = 3 [pid 374] close(29 [pid 381] write(3, "1000", 4 [pid 374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... write resumed>) = 4 [pid 374] exit_group(0 [pid 307] <... restart_syscall resumed>) = 0 [pid 381] close(3 [pid 374] <... exit_group resumed>) = ? [pid 381] <... close resumed>) = 0 [pid 374] +++ exited with 0 +++ [pid 301] <... restart_syscall resumed>) = 0 [pid 381] symlink("/dev/binderfs", "./binderfs"executing program [pid 307] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 381] <... symlink resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 381] write(1, "executing program\n", 18) = 18 [pid 381] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 306] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 381] <... openat resumed>) = 3 [pid 307] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 381] setns(201, 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 381] <... setns resumed>) = 0 [pid 301] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 381] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 307] <... openat resumed>) = 3 [pid 306] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 381] <... socket resumed>) = 4 [pid 307] newfstatat(3, "", [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 381] setns(3, 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 306] <... openat resumed>) = 3 [pid 381] <... setns resumed>) = 0 [pid 301] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 381] close(3 [pid 307] getdents64(3, [pid 306] newfstatat(3, "", [pid 381] <... close resumed>) = 0 [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 301] <... openat resumed>) = 3 [pid 381] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 307] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 301] newfstatat(3, "", [pid 381] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] getdents64(3, [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 381] ioctl(3, TIOCSETD, [15] [pid 307] newfstatat(AT_FDCWD, "./6/binderfs", [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 301] getdents64(3, [pid 381] <... ioctl resumed>) = 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... restart_syscall resumed>) = 0 [ 46.594485][ T311] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 46.594522][ T318] Bluetooth: hci4: command 0x1003 tx timeout [ 46.600428][ T311] Bluetooth: hci3: command 0x1003 tx timeout [ 46.606292][ T309] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 46.612021][ T45] Bluetooth: hci2: command 0x1003 tx timeout [ 46.617996][ T323] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 46.623951][ T317] Bluetooth: hci3: Opcode 0x1003 failed: -110 [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 381] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 307] unlink("./6/binderfs" [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] newfstatat(AT_FDCWD, "./7/binderfs", [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] newfstatat(AT_FDCWD, "./6/binderfs", [pid 306] unlink("./7/binderfs" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] <... unlink resumed>) = 0 [pid 301] unlink("./6/binderfs" [pid 381] <... ioctl resumed>, 0x4) = 0 [pid 307] <... unlink resumed>) = 0 [pid 306] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... unlink resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 306] unlink("./7/cgroup.net" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 381] ioctl(4, HCISETLINKPOL [pid 307] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... unlink resumed>) = 0 [pid 304] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 304] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] <... openat resumed>) = 3 [pid 307] unlink("./6/cgroup.net" [pid 304] newfstatat(3, "", [pid 307] <... unlink resumed>) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 307] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] getdents64(3, [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 307] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 304] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] unlink("./6/cgroup.cpu" [pid 304] newfstatat(AT_FDCWD, "./7/binderfs", [pid 307] <... unlink resumed>) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] unlink("./7/binderfs" [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... unlink resumed>) = 0 [pid 307] newfstatat(AT_FDCWD, "./6/cgroup", [pid 304] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] unlink("./6/cgroup" [pid 304] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 307] <... unlink resumed>) = 0 [pid 306] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./6/cgroup.net" [pid 307] getdents64(3, [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] unlink("./7/cgroup.net" [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 306] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 304] <... unlink resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 307] close(3 [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] <... close resumed>) = 0 [pid 306] unlink("./7/cgroup.cpu" [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] rmdir("./6" [pid 304] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... rmdir resumed>) = 0 [pid 306] <... unlink resumed>) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 307] mkdir("./7", 0777 [pid 306] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] unlink("./7/cgroup.cpu" [pid 307] <... mkdir resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... unlink resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] newfstatat(AT_FDCWD, "./7/cgroup", [pid 304] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 382 attached [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] unlink("./6/cgroup.cpu" [pid 382] set_robust_list(0x55558827a660, 24 [pid 307] <... clone resumed>, child_tidptr=0x55558827a650) = 9 [pid 306] unlink("./7/cgroup" [pid 304] newfstatat(AT_FDCWD, "./7/cgroup", [pid 301] <... unlink resumed>) = 0 [pid 382] <... set_robust_list resumed>) = 0 [pid 306] <... unlink resumed>) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 382] chdir("./7" [pid 306] getdents64(3, [pid 304] unlink("./7/cgroup" [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 382] <... chdir resumed>) = 0 [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 301] newfstatat(AT_FDCWD, "./6/cgroup", [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] close(3 [pid 304] <... unlink resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 382] <... prctl resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 304] getdents64(3, [pid 301] unlink("./6/cgroup" [pid 382] setpgid(0, 0 [pid 306] rmdir("./7" [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 301] <... unlink resumed>) = 0 [pid 382] <... setpgid resumed>) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 304] close(3 [pid 301] getdents64(3, [pid 382] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 306] mkdir("./8", 0777 [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 304] <... close resumed>) = 0 [pid 382] <... symlink resumed>) = 0 [pid 304] rmdir("./7" [pid 382] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 306] <... mkdir resumed>) = 0 [pid 304] <... rmdir resumed>) = 0 [pid 301] close(3 [pid 382] <... symlink resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] mkdir("./8", 0777 [pid 382] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 304] <... mkdir resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 382] <... symlink resumed>) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 383 attached [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] rmdir("./6"./strace-static-x86_64: Process 384 attached [pid 383] set_robust_list(0x55558827a660, 24 [pid 382] <... openat resumed>) = 3 [pid 306] <... clone resumed>, child_tidptr=0x55558827a650) = 10 [pid 304] <... clone resumed>, child_tidptr=0x55558827a650) = 10 [pid 384] set_robust_list(0x55558827a660, 24 [pid 382] write(3, "1000", 4 [pid 301] <... rmdir resumed>) = 0 [pid 384] <... set_robust_list resumed>) = 0 [pid 383] <... set_robust_list resumed>) = 0 [pid 382] <... write resumed>) = 4 [pid 301] mkdir("./7", 0777 [pid 382] close(3 [pid 384] chdir("./8" [pid 382] <... close resumed>) = 0 [pid 382] symlink("/dev/binderfs", "./binderfs" [pid 301] <... mkdir resumed>) = 0 executing program [pid 384] <... chdir resumed>) = 0 [pid 383] chdir("./8" [pid 382] <... symlink resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 383] <... chdir resumed>) = 0 [pid 382] write(1, "executing program\n", 18) = 18 [pid 382] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 382] setns(201, 0) = 0 [pid 382] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 ./strace-static-x86_64: Process 385 attached [pid 384] <... prctl resumed>) = 0 [pid 383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 382] setns(3, 0 [pid 301] <... clone resumed>, child_tidptr=0x55558827a650) = 9 [pid 385] set_robust_list(0x55558827a660, 24 [pid 384] setpgid(0, 0 [pid 383] <... prctl resumed>) = 0 [pid 382] <... setns resumed>) = 0 [pid 385] <... set_robust_list resumed>) = 0 [pid 384] <... setpgid resumed>) = 0 [pid 382] close(3 [pid 383] setpgid(0, 0 [pid 382] <... close resumed>) = 0 [pid 385] chdir("./7" [pid 382] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 385] <... chdir resumed>) = 0 [pid 384] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 383] <... setpgid resumed>) = 0 [pid 382] <... openat resumed>) = 3 [pid 382] ioctl(3, TIOCSETD, [15] [pid 385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 384] <... symlink resumed>) = 0 [pid 382] <... ioctl resumed>) = 0 [pid 382] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 385] <... prctl resumed>) = 0 [pid 384] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 383] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 385] setpgid(0, 0 [pid 384] <... symlink resumed>) = 0 [pid 383] <... symlink resumed>) = 0 [pid 382] <... ioctl resumed>, 0x4) = 0 [pid 385] <... setpgid resumed>) = 0 [pid 384] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 383] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 382] ioctl(4, HCISETLINKPOL [pid 385] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 384] <... symlink resumed>) = 0 [pid 383] <... symlink resumed>) = 0 [pid 384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 383] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 385] <... symlink resumed>) = 0 [pid 384] <... openat resumed>) = 3 [pid 385] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 383] <... symlink resumed>) = 0 [pid 384] write(3, "1000", 4 [pid 385] <... symlink resumed>) = 0 [pid 384] <... write resumed>) = 4 [pid 383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 385] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 384] close(3) = 0 [pid 383] <... openat resumed>) = 3 [pid 385] <... symlink resumed>) = 0 [pid 384] symlink("/dev/binderfs", "./binderfs" [pid 385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 383] write(3, "1000", 4 [pid 385] <... openat resumed>) = 3 [pid 384] <... symlink resumed>) = 0 [pid 383] <... write resumed>) = 4 executing program [pid 385] write(3, "1000", 4 [pid 384] write(1, "executing program\n", 18 [pid 383] close(3 [pid 385] <... write resumed>) = 4 [pid 385] close(3 [pid 384] <... write resumed>) = 18 [pid 383] <... close resumed>) = 0 [pid 385] <... close resumed>) = 0 [pid 384] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 383] symlink("/dev/binderfs", "./binderfs" [pid 385] symlink("/dev/binderfs", "./binderfs" [pid 384] <... openat resumed>) = 3 [pid 383] <... symlink resumed>) = 0 [pid 384] setns(201, 0executing program [pid 383] write(1, "executing program\n", 18) = 18 [pid 385] <... symlink resumed>) = 0 executing program [pid 385] write(1, "executing program\n", 18 [pid 384] <... setns resumed>) = 0 [pid 383] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 385] <... write resumed>) = 18 [pid 384] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 385] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 384] <... socket resumed>) = 4 [pid 383] <... openat resumed>) = 3 [pid 383] setns(201, 0) = 0 [pid 385] <... openat resumed>) = 3 [pid 384] setns(3, 0 [pid 383] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 385] setns(201, 0 [pid 384] <... setns resumed>) = 0 [pid 385] <... setns resumed>) = 0 [pid 384] close(3 [pid 383] <... socket resumed>) = 4 [pid 385] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 384] <... close resumed>) = 0 [pid 383] setns(3, 0 [pid 385] <... socket resumed>) = 4 [pid 384] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 385] setns(3, 0 [pid 383] <... setns resumed>) = 0 [pid 384] <... openat resumed>) = 3 [pid 383] close(3 [pid 385] <... setns resumed>) = 0 [pid 384] ioctl(3, TIOCSETD, [15] [pid 383] <... close resumed>) = 0 [pid 385] close(3 [pid 384] <... ioctl resumed>) = 0 [pid 383] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 385] <... close resumed>) = 0 [pid 384] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 385] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 383] <... openat resumed>) = 3 [pid 383] ioctl(3, TIOCSETD, [15]) = 0 [pid 383] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 384] <... ioctl resumed>, 0x4) = 0 [pid 383] <... ioctl resumed>, 0x4) = 0 [pid 383] ioctl(4, HCISETLINKPOL [pid 385] <... openat resumed>) = 3 [pid 385] ioctl(3, TIOCSETD, [15]) = 0 [pid 385] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [ 46.664507][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.682306][ T43] Bluetooth: hci1: Frame reassembly failed (-84) [ 46.703067][ T43] Bluetooth: hci2: Frame reassembly failed (-84) [pid 385] ioctl(4, HCISETLINKPOL [ 46.703879][ T8] Bluetooth: hci3: Frame reassembly failed (-84) [ 46.709677][ T43] Bluetooth: hci4: Frame reassembly failed (-84) [pid 384] ioctl(4, HCISETLINKPOL [pid 381] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 381] close(3 [pid 382] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 382] close(3 [pid 383] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 383] close(3 [pid 385] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 385] close(3 [pid 384] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [ 48.674518][ T317] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.674517][ T311] Bluetooth: hci0: command 0x1003 tx timeout [ 48.686535][ T381] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 48.692793][ T382] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 48.698782][ T383] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 48.704742][ T385] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 48.710779][ T384] Bluetooth: hci0: Opcode 0x080f failed: -22 [pid 384] close(3) = 0 [pid 383] <... close resumed>) = 0 [pid 381] <... close resumed>) = 0 [pid 384] close(4 [pid 383] close(4 [pid 381] close(4 [pid 384] <... close resumed>) = 0 [pid 383] <... close resumed>) = 0 [pid 381] <... close resumed>) = 0 [pid 384] close(5 [pid 383] close(5 [pid 381] close(5 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(6 [pid 383] close(6 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(6 [pid 384] close(7 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(8 [pid 383] close(7 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(7 [pid 384] close(9 [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(10 [pid 383] close(8 [pid 381] close(8 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(11 [pid 383] close(9 [pid 381] close(9 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(12 [pid 383] close(10 [pid 381] close(10 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(13 [pid 383] close(11 [pid 381] close(11 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(14 [pid 383] close(12 [pid 381] close(12 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = 0 [pid 384] close(15 [pid 383] close(13 [pid 381] close(13 [pid 385] close(4 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(16 [pid 383] close(14 [pid 381] close(14 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(17 [pid 383] close(15 [pid 382] <... close resumed>) = 0 [pid 381] close(15 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(4 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = 0 [pid 384] close(18 [pid 383] close(16 [pid 381] close(16 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(5 [pid 384] close(19 [pid 383] close(17 [pid 382] <... close resumed>) = 0 [pid 381] close(17 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(20 [pid 383] close(18 [pid 382] close(5 [pid 381] close(18 [pid 385] close(6 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(21 [pid 383] close(19 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(19 [pid 385] close(7 [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(22 [pid 383] close(20 [pid 381] close(20 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(6 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(8 [pid 384] close(23 [pid 383] close(21 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(21 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(7 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(9 [pid 384] close(24 [pid 383] close(22 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(22 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(8 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(10 [pid 384] close(25 [pid 383] close(23 [pid 381] close(23 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(11 [pid 384] close(26 [pid 383] close(24 [pid 381] close(24 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(9 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(12 [pid 384] close(27 [pid 383] close(25 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(25 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(10 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(13 [pid 384] close(28 [pid 383] close(26 [pid 381] close(26 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(14 [pid 384] close(29 [pid 383] close(27 [pid 382] close(11 [pid 381] close(27 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(15 [pid 384] exit_group(0 [pid 383] close(28 [pid 381] close(28 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] <... exit_group resumed>) = ? [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(12 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] close(16 [pid 384] +++ exited with 0 +++ [pid 383] close(29 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 381] close(29 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(13 [pid 381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 385] close(17 [pid 383] exit_group(0 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] <... exit_group resumed>) = ? [pid 382] close(14 [pid 381] exit_group(0 [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 385] close(18 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(15 [pid 385] close(19 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(16 [pid 385] close(20 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(17 [pid 385] close(21 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 383] +++ exited with 0 +++ [pid 382] close(18 [pid 381] <... exit_group resumed>) = ? [pid 385] close(22 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(19 [pid 385] close(23 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(20 [pid 385] close(24 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(21 [pid 385] close(25 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(22 [pid 381] +++ exited with 0 +++ [pid 385] close(26 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(23 [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 385] close(27 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(24 [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 385] close(28 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(25 [pid 385] close(29 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... restart_syscall resumed>) = 0 [pid 385] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 382] close(26 [pid 305] <... restart_syscall resumed>) = 0 [pid 304] <... restart_syscall resumed>) = 0 [pid 385] exit_group(0 [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 385] <... exit_group resumed>) = ? [pid 382] close(27 [pid 306] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 385] +++ exited with 0 +++ [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 3 [pid 304] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 382] close(28 [pid 306] newfstatat(3, "", [pid 305] newfstatat(3, "", [pid 382] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 304] <... openat resumed>) = 3 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 382] close(29) = -1 EBADF (Bad file descriptor) [pid 382] exit_group(0 [pid 306] getdents64(3, [pid 305] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 304] newfstatat(3, "", [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 382] <... exit_group resumed>) = ? [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 306] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] getdents64(3, [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 382] +++ exited with 0 +++ [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 304] getdents64(3, [pid 306] newfstatat(AT_FDCWD, "./8/binderfs", [pid 305] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 306] unlink("./8/binderfs" [pid 305] newfstatat(AT_FDCWD, "./8/binderfs", [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... unlink resumed>) = 0 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] newfstatat(AT_FDCWD, "./8/binderfs", [pid 306] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] unlink("./8/binderfs" [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... unlink resumed>) = 0 [pid 304] unlink("./8/binderfs" [pid 306] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 305] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... unlink resumed>) = 0 [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] unlink("./8/cgroup.net" [pid 305] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... unlink resumed>) = 0 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 306] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] unlink("./8/cgroup.net" [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... unlink resumed>) = 0 [pid 304] unlink("./8/cgroup.net" [pid 306] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 305] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... unlink resumed>) = 0 [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] unlink("./8/cgroup.cpu" [pid 305] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... unlink resumed>) = 0 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 306] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] unlink("./8/cgroup.cpu" [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... unlink resumed>) = 0 [pid 304] unlink("./8/cgroup.cpu" [pid 306] newfstatat(AT_FDCWD, "./8/cgroup", [pid 305] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... unlink resumed>) = 0 [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] unlink("./8/cgroup" [pid 305] newfstatat(AT_FDCWD, "./8/cgroup", [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... unlink resumed>) = 0 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] newfstatat(AT_FDCWD, "./8/cgroup", [pid 306] getdents64(3, [pid 305] unlink("./8/cgroup" [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 305] <... unlink resumed>) = 0 [pid 304] unlink("./8/cgroup" [pid 306] close(3 [pid 305] getdents64(3, [pid 304] <... unlink resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 304] getdents64(3, [pid 306] rmdir("./8" [pid 305] close(3 [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 304] close(3 [pid 306] mkdir("./9", 0777 [pid 305] rmdir("./8" [pid 304] <... close resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 304] rmdir("./8" [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] mkdir("./9", 0777 [pid 304] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 389 attached [pid 305] <... mkdir resumed>) = 0 [pid 304] mkdir("./9", 0777 [pid 389] set_robust_list(0x55558827a660, 24 [pid 306] <... clone resumed>, child_tidptr=0x55558827a650) = 11 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 389] <... set_robust_list resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 389] chdir("./9") = 0 [pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 389] setpgid(0, 0 [pid 307] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 390 attached [pid 389] <... setpgid resumed>) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 390] set_robust_list(0x55558827a660, 24 [pid 389] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 305] <... clone resumed>, child_tidptr=0x55558827a650) = 11 [pid 301] <... restart_syscall resumed>) = 0 [pid 390] <... set_robust_list resumed>) = 0 [pid 389] <... symlink resumed>) = 0 [pid 390] chdir("./9" [pid 389] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu"./strace-static-x86_64: Process 391 attached [pid 390] <... chdir resumed>) = 0 [pid 389] <... symlink resumed>) = 0 [pid 307] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 391] set_robust_list(0x55558827a660, 24 [pid 390] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 389] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 391] <... set_robust_list resumed>) = 0 [pid 390] <... prctl resumed>) = 0 [pid 389] <... symlink resumed>) = 0 [pid 307] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 304] <... clone resumed>, child_tidptr=0x55558827a650) = 11 [pid 391] chdir("./9" [pid 390] setpgid(0, 0 [pid 389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] <... openat resumed>) = 3 [pid 391] <... chdir resumed>) = 0 [pid 390] <... setpgid resumed>) = 0 [pid 389] <... openat resumed>) = 3 [pid 307] newfstatat(3, "", [pid 301] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 390] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 389] write(3, "1000", 4 [pid 307] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 391] <... prctl resumed>) = 0 [pid 390] <... symlink resumed>) = 0 [pid 389] <... write resumed>) = 4 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 391] setpgid(0, 0 [pid 390] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 389] close(3 [pid 307] getdents64(3, [pid 301] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 391] <... setpgid resumed>) = 0 [pid 390] <... symlink resumed>) = 0 [pid 389] <... close resumed>) = 0 [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 301] <... openat resumed>) = 3 [pid 391] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 390] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 389] symlink("/dev/binderfs", "./binderfs" [pid 307] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] newfstatat(3, "", [pid 391] <... symlink resumed>) = 0 [pid 390] <... symlink resumed>) = 0 [pid 389] <... symlink resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 391] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 389] write(1, "executing program\n", 18 [pid 307] newfstatat(AT_FDCWD, "./7/binderfs", [pid 391] <... symlink resumed>) = 0 [pid 390] <... openat resumed>) = 3 [pid 389] <... write resumed>) = 18 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] getdents64(3, [pid 391] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 390] write(3, "1000", 4 [pid 389] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 307] unlink("./7/binderfs" [pid 391] <... symlink resumed>) = 0 [pid 390] <... write resumed>) = 4 [pid 389] <... openat resumed>) = 3 [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 390] close(3 [pid 389] setns(201, 0 [pid 307] <... unlink resumed>) = 0 [pid 301] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 391] <... openat resumed>) = 3 [pid 390] <... close resumed>) = 0 [pid 389] <... setns resumed>) = 0 [pid 307] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 391] write(3, "1000", 4 [pid 390] symlink("/dev/binderfs", "./binderfs" [pid 389] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 391] <... write resumed>) = 4 [pid 390] <... symlink resumed>) = 0 [pid 389] <... socket resumed>) = 4 [pid 307] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 301] newfstatat(AT_FDCWD, "./7/binderfs", [pid 391] close(3 [pid 390] write(1, "executing program\n", 18executing program [pid 389] setns(3, 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 391] <... close resumed>) = 0 [pid 390] <... write resumed>) = 18 [pid 389] <... setns resumed>) = 0 [pid 307] unlink("./7/cgroup.net" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 391] symlink("/dev/binderfs", "./binderfs" [pid 390] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 389] close(3 [pid 307] <... unlink resumed>) = 0 [pid 301] unlink("./7/binderfs" [pid 391] <... symlink resumed>) = 0 [pid 390] <... openat resumed>) = 3 [pid 389] <... close resumed>) = 0 [pid 307] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 391] write(1, "executing program\n", 18executing program [pid 390] setns(201, 0 [pid 389] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 301] <... unlink resumed>) = 0 [pid 391] <... write resumed>) = 18 [pid 390] <... setns resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 391] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 390] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 389] <... openat resumed>) = 3 [pid 307] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 391] <... openat resumed>) = 3 [pid 390] <... socket resumed>) = 4 [pid 389] ioctl(3, TIOCSETD, [15] [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 391] setns(201, 0 [pid 390] setns(3, 0 [pid 307] unlink("./7/cgroup.cpu" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 48.754522][ T318] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 48.754563][ T315] Bluetooth: hci4: command 0x1003 tx timeout [ 48.760633][ T318] Bluetooth: hci2: command 0x1003 tx timeout [ 48.766421][ T45] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 48.772314][ T323] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 48.778271][ T317] Bluetooth: hci1: command 0x1003 tx timeout [ 48.784078][ T309] Bluetooth: hci1: Opcode 0x1003 failed: -110 [pid 391] <... setns resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 301] unlink("./7/cgroup.net" [pid 391] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 390] <... setns resumed>) = 0 [pid 389] <... ioctl resumed>) = 0 [pid 307] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... unlink resumed>) = 0 [pid 391] <... socket resumed>) = 4 [pid 390] close(3 [pid 389] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 391] setns(3, 0 [pid 390] <... close resumed>) = 0 [pid 307] newfstatat(AT_FDCWD, "./7/cgroup", [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 391] <... setns resumed>) = 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 390] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 389] <... ioctl resumed>, 0x4) = 0 [pid 390] <... openat resumed>) = 3 [pid 389] ioctl(4, HCISETLINKPOL [pid 390] ioctl(3, TIOCSETD, [15]) = 0 [pid 390] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 391] close(3 [pid 390] <... ioctl resumed>, 0x4) = 0 [pid 307] unlink("./7/cgroup" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 391] <... close resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 301] unlink("./7/cgroup.cpu" [pid 391] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 307] getdents64(3, [pid 301] <... unlink resumed>) = 0 [pid 391] <... openat resumed>) = 3 [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 301] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 391] ioctl(3, TIOCSETD, [15] [pid 307] close(3 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 391] <... ioctl resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./7/cgroup", [pid 391] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 307] rmdir("./7" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 391] <... ioctl resumed>, 0x4) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 301] unlink("./7/cgroup" [pid 391] ioctl(4, HCISETLINKPOL [pid 307] mkdir("./8", 0777 [pid 301] <... unlink resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 301] getdents64(3, [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 392 attached [pid 390] ioctl(4, HCISETLINKPOL [pid 301] close(3 [pid 392] set_robust_list(0x55558827a660, 24 [pid 307] <... clone resumed>, child_tidptr=0x55558827a650) = 10 [pid 301] <... close resumed>) = 0 [pid 392] <... set_robust_list resumed>) = 0 [pid 301] rmdir("./7" [pid 392] chdir("./8" [pid 301] <... rmdir resumed>) = 0 [pid 392] <... chdir resumed>) = 0 [pid 301] mkdir("./8", 0777 [pid 392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] <... mkdir resumed>) = 0 [pid 392] <... prctl resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 394 attached [pid 392] setpgid(0, 0 [pid 394] set_robust_list(0x55558827a660, 24 [pid 392] <... setpgid resumed>) = 0 [pid 301] <... clone resumed>, child_tidptr=0x55558827a650) = 10 [pid 394] <... set_robust_list resumed>) = 0 [pid 392] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 394] chdir("./8" [pid 392] <... symlink resumed>) = 0 [pid 394] <... chdir resumed>) = 0 [pid 392] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 392] <... symlink resumed>) = 0 [pid 394] <... prctl resumed>) = 0 [pid 392] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 394] setpgid(0, 0 [pid 392] <... symlink resumed>) = 0 [pid 394] <... setpgid resumed>) = 0 [pid 392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 394] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 392] <... openat resumed>) = 3 [pid 394] <... symlink resumed>) = 0 [pid 392] write(3, "1000", 4 [pid 394] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 392] <... write resumed>) = 4 [pid 394] <... symlink resumed>) = 0 [pid 392] close(3 [pid 394] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 392] <... close resumed>) = 0 [pid 394] <... symlink resumed>) = 0 [pid 392] symlink("/dev/binderfs", "./binderfs" [pid 394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 392] <... symlink resumed>) = 0 [pid 394] <... openat resumed>) = 3 executing program [pid 392] write(1, "executing program\n", 18 [pid 394] write(3, "1000", 4 [pid 392] <... write resumed>) = 18 [pid 394] <... write resumed>) = 4 [pid 392] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 394] close(3 [pid 392] <... openat resumed>) = 3 [pid 394] <... close resumed>) = 0 [pid 392] setns(201, 0 [pid 394] symlink("/dev/binderfs", "./binderfs" [pid 392] <... setns resumed>) = 0 [pid 394] <... symlink resumed>) = 0 [pid 392] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCIexecuting program [pid 394] write(1, "executing program\n", 18 [pid 392] <... socket resumed>) = 4 [pid 394] <... write resumed>) = 18 [pid 392] setns(3, 0 [pid 394] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 392] <... setns resumed>) = 0 [pid 394] <... openat resumed>) = 3 [pid 392] close(3 [pid 394] setns(201, 0 [pid 392] <... close resumed>) = 0 [pid 394] <... setns resumed>) = 0 [pid 392] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 394] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 392] <... openat resumed>) = 3 [pid 394] <... socket resumed>) = 4 [pid 392] ioctl(3, TIOCSETD, [15] [pid 394] setns(3, 0 [pid 392] <... ioctl resumed>) = 0 [pid 394] <... setns resumed>) = 0 [pid 392] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 394] close(3 [pid 392] <... ioctl resumed>, 0x4) = 0 [pid 394] <... close resumed>) = 0 [pid 394] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 394] ioctl(3, TIOCSETD, [15]) = 0 [pid 394] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 392] ioctl(4, HCISETLINKPOL [ 48.837292][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.843801][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 48.850810][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 48.859284][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 48.863877][ T361] Bluetooth: hci3: Frame reassembly failed (-84) [ 48.871783][ T8] Bluetooth: hci4: Frame reassembly failed (-84) [ 48.873405][ T361] Bluetooth: hci3: Frame reassembly failed (-84) [ 50.914496][ T318] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 50.914523][ T323] Bluetooth: hci4: command 0x1003 tx timeout [ 50.914544][ T323] Bluetooth: hci3: command 0x1003 tx timeout [ 50.920443][ T315] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 50.926628][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 50.926674][ T45] Bluetooth: hci2: command 0x1003 tx timeout [ 50.932391][ T317] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 50.938320][ T309] Bluetooth: hci0: Opcode 0x1003 failed: -110 [pid 394] ioctl(4, HCISETLINKPOL [pid 389] <... ioctl resumed>, 0x400000000300) = -1 ETIMEDOUT (Connection timed out) [ 52.994499][ T389] Bluetooth: hci0: Opcode 0x080f failed: -110 [pid 389] close(3 [pid 306] kill(-11, SIGKILL [pid 305] kill(-11, SIGKILL [pid 306] <... kill resumed>) = 0 [pid 306] kill(11, SIGKILL) = 0 [pid 305] <... kill resumed>) = 0 [pid 305] kill(11, SIGKILL) = 0 [pid 304] kill(-11, SIGKILL) = 0 [pid 304] kill(11, SIGKILL) = 0 [pid 391] <... ioctl resumed> ) = ? [pid 390] <... ioctl resumed> ) = ? [pid 307] kill(-10, SIGKILL) = 0 [pid 307] kill(10, SIGKILL) = 0 [pid 301] kill(-10, SIGKILL) = 0 [pid 301] kill(10, SIGKILL) = 0 [pid 394] <... ioctl resumed> ) = ? [pid 392] <... ioctl resumed> ) = ? [pid 389] <... close resumed>) = ? [pid 389] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=11, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1} --- [pid 306] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 306] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 306] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./9/binderfs") = 0 [pid 306] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./9/cgroup.net") = 0 [pid 306] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./9/cgroup.cpu") = 0 [pid 306] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./9/cgroup") = 0 [pid 306] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./9") = 0 [pid 306] mkdir("./10", 0777) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 402 attached , child_tidptr=0x55558827a650) = 12 [pid 402] set_robust_list(0x55558827a660, 24) = 0 [pid 402] chdir("./10") = 0 [pid 402] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 402] setpgid(0, 0) = 0 [pid 402] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 402] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 402] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 402] write(3, "1000", 4) = 4 [pid 402] close(3) = 0 [pid 402] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 402] write(1, "executing program\n", 18) = 18 [pid 402] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 402] setns(201, 0) = 0 [pid 402] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 402] setns(3, 0) = 0 [pid 402] close(3) = 0 [pid 402] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 402] ioctl(3, TIOCSETD, [15]) = 0 [pid 402] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 391] +++ killed by SIGKILL +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=11, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 402] <... ioctl resumed>, 0x4) = 0 [pid 304] restart_syscall(<... resuming interrupted kill ...>) = 0 [ 53.833441][ T391] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 53.839569][ T390] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 53.854693][ T394] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 53.860582][ T392] Bluetooth: hci0: Opcode 0x080f failed: -4 [pid 304] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 304] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 304] getdents64(3, 0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 304] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./9/binderfs") = 0 [pid 304] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./9/cgroup.net") = 0 [pid 304] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./9/cgroup.cpu") = 0 [pid 304] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./9/cgroup") = 0 [pid 304] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [pid 304] rmdir("./9") = 0 [pid 304] mkdir("./10", 0777) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 403 attached [pid 403] set_robust_list(0x55558827a660, 24 [pid 402] ioctl(4, HCISETLINKPOL [pid 304] <... clone resumed>, child_tidptr=0x55558827a650) = 12 [pid 403] <... set_robust_list resumed>) = 0 [pid 403] chdir("./10") = 0 [pid 403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 403] setpgid(0, 0) = 0 [pid 403] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 403] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 403] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 403] write(3, "1000", 4) = 4 [pid 403] close(3) = 0 [pid 403] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 403] write(1, "executing program\n", 18) = 18 [pid 403] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 403] setns(201, 0) = 0 [pid 403] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 403] setns(3, 0) = 0 [pid 403] close(3) = 0 [pid 403] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 403] ioctl(3, TIOCSETD, [15]) = 0 [pid 403] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 403] ioctl(4, HCISETLINKPOL [pid 390] +++ killed by SIGKILL +++ [pid 394] +++ killed by SIGKILL +++ [pid 392] +++ killed by SIGKILL +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=11, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=10, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 305] restart_syscall(<... resuming interrupted kill ...> [pid 307] restart_syscall(<... resuming interrupted kill ...> [pid 305] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 305] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... openat resumed>) = 3 [pid 307] <... openat resumed>) = 3 [pid 305] newfstatat(3, "", [pid 307] newfstatat(3, "", [pid 305] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 305] getdents64(3, [pid 307] getdents64(3, [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 305] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./9/binderfs", [pid 307] newfstatat(AT_FDCWD, "./8/binderfs", [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./9/binderfs" [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=10, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 307] unlink("./8/binderfs" [pid 305] <... unlink resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 305] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 307] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./9/cgroup.net" [pid 307] unlink("./8/cgroup.net" [pid 305] <... unlink resumed>) = 0 [pid 305] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] <... unlink resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 305] unlink("./9/cgroup.cpu" [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... unlink resumed>) = 0 [pid 301] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] unlink("./8/cgroup.cpu" [pid 305] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] <... unlink resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... openat resumed>) = 3 [pid 307] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] newfstatat(AT_FDCWD, "./9/cgroup", [pid 301] newfstatat(3, "", [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] newfstatat(AT_FDCWD, "./8/cgroup", [pid 305] unlink("./9/cgroup" [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... unlink resumed>) = 0 [pid 301] getdents64(3, [pid 307] unlink("./8/cgroup" [pid 305] getdents64(3, [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 307] <... unlink resumed>) = 0 [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 301] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] getdents64(3, [pid 305] close(3 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 305] <... close resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./8/binderfs", [pid 307] close(3 [pid 305] rmdir("./9" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] <... close resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 301] unlink("./8/binderfs" [pid 307] rmdir("./8" [pid 305] mkdir("./10", 0777 [pid 301] <... unlink resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 301] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] mkdir("./9", 0777 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... mkdir resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 404 attached [pid 301] unlink("./8/cgroup.net" [pid 404] set_robust_list(0x55558827a660, 24 [pid 307] <... clone resumed>, child_tidptr=0x55558827a650) = 11 [pid 301] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 405 attached [pid 404] <... set_robust_list resumed>) = 0 [pid 301] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 405] set_robust_list(0x55558827a660, 24 [pid 404] chdir("./9" [pid 305] <... clone resumed>, child_tidptr=0x55558827a650) = 12 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 405] <... set_robust_list resumed>) = 0 [pid 404] <... chdir resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 405] chdir("./10" [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 405] <... chdir resumed>) = 0 [pid 404] <... prctl resumed>) = 0 [pid 301] unlink("./8/cgroup.cpu" [pid 405] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 404] setpgid(0, 0 [pid 301] <... unlink resumed>) = 0 [pid 405] <... prctl resumed>) = 0 [pid 404] <... setpgid resumed>) = 0 [pid 301] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 405] setpgid(0, 0 [pid 404] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 405] <... setpgid resumed>) = 0 [pid 404] <... symlink resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./8/cgroup", [pid 405] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 404] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 405] <... symlink resumed>) = 0 [pid 405] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 404] <... symlink resumed>) = 0 [pid 301] unlink("./8/cgroup" [pid 405] <... symlink resumed>) = 0 [pid 404] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 301] <... unlink resumed>) = 0 [pid 405] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 404] <... symlink resumed>) = 0 [pid 301] getdents64(3, [pid 405] <... symlink resumed>) = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 404] <... openat resumed>) = 3 [pid 301] close(3 [pid 405] <... openat resumed>) = 3 [pid 404] write(3, "1000", 4 [pid 301] <... close resumed>) = 0 [pid 405] write(3, "1000", 4 [pid 404] <... write resumed>) = 4 [pid 301] rmdir("./8" [pid 405] <... write resumed>) = 4 [pid 404] close(3 [pid 301] <... rmdir resumed>) = 0 [pid 405] close(3 [pid 404] <... close resumed>) = 0 [pid 301] mkdir("./9", 0777 [pid 405] <... close resumed>) = 0 [pid 404] symlink("/dev/binderfs", "./binderfs" [pid 301] <... mkdir resumed>) = 0 [pid 405] symlink("/dev/binderfs", "./binderfs" [pid 404] <... symlink resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 405] <... symlink resumed>) = 0 [pid 404] write(1, "executing program\n", 18executing program executing program [pid 405] write(1, "executing program\n", 18./strace-static-x86_64: Process 406 attached ) = 18 [pid 404] <... write resumed>) = 18 [pid 301] <... clone resumed>, child_tidptr=0x55558827a650) = 11 [pid 406] set_robust_list(0x55558827a660, 24 [pid 405] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 404] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 406] <... set_robust_list resumed>) = 0 [pid 405] <... openat resumed>) = 3 [pid 404] <... openat resumed>) = 3 [pid 406] chdir("./9" [pid 405] setns(201, 0 [pid 404] setns(201, 0 [pid 406] <... chdir resumed>) = 0 [pid 405] <... setns resumed>) = 0 [pid 404] <... setns resumed>) = 0 [pid 406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 405] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 404] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 406] <... prctl resumed>) = 0 [pid 405] <... socket resumed>) = 4 [pid 404] <... socket resumed>) = 4 [pid 406] setpgid(0, 0 [pid 405] setns(3, 0 [pid 404] setns(3, 0 [pid 406] <... setpgid resumed>) = 0 [pid 405] <... setns resumed>) = 0 [pid 404] <... setns resumed>) = 0 [pid 406] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 405] close(3 [pid 404] close(3 [pid 406] <... symlink resumed>) = 0 [pid 405] <... close resumed>) = 0 [pid 404] <... close resumed>) = 0 [pid 406] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 405] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 404] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 406] <... symlink resumed>) = 0 [pid 405] <... openat resumed>) = 3 [pid 404] <... openat resumed>) = 3 [pid 406] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 404] ioctl(3, TIOCSETD, [15] [pid 406] <... symlink resumed>) = 0 [pid 405] ioctl(3, TIOCSETD, [15] [pid 404] <... ioctl resumed>) = 0 [pid 406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 404] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 406] <... openat resumed>) = 3 [pid 405] <... ioctl resumed>) = 0 [ 53.885284][ T361] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.898165][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 53.905313][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 53.928753][ T8] Bluetooth: hci2: Frame reassembly failed (-84) [pid 405] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 404] <... ioctl resumed>, 0x4) = 0 [pid 406] write(3, "1000", 4 [pid 405] <... ioctl resumed>, 0x4) = 0 [pid 404] ioctl(4, HCISETLINKPOL [pid 406] <... write resumed>) = 4 [pid 405] ioctl(4, HCISETLINKPOL [pid 406] close(3) = 0 [pid 406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 406] write(1, "executing program\n", 18executing program ) = 18 [pid 406] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 406] setns(201, 0) = 0 [pid 406] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 406] setns(3, 0) = 0 [pid 406] close(3) = 0 [pid 406] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 406] ioctl(3, TIOCSETD, [15]) = 0 [pid 406] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [ 53.933717][ T361] Bluetooth: hci3: Frame reassembly failed (-84) [ 53.948266][ T361] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.954484][ T45] Bluetooth: hci3: command 0x1003 tx timeout [ 55.954487][ T315] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 55.954546][ T317] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.966463][ T315] Bluetooth: hci4: command 0x1003 tx timeout [ 55.966492][ T315] Bluetooth: hci2: command 0x1003 tx timeout [ 55.966509][ T315] Bluetooth: hci1: command 0x1003 tx timeout [ 55.972282][ T311] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 55.978343][ T315] Bluetooth: hci0: command 0x1003 tx timeout [pid 406] ioctl(4, HCISETLINKPOL [pid 402] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 402] close(3 [pid 403] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 403] close(3 [pid 404] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 405] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 404] close(3 [pid 405] close(3 [pid 406] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 406] close(3 [pid 405] <... close resumed>) = 0 [pid 404] <... close resumed>) = 0 [pid 403] <... close resumed>) = 0 [pid 403] close(4) = 0 [pid 403] close(5) = -1 EBADF (Bad file descriptor) [pid 403] close(6) = -1 EBADF (Bad file descriptor) [pid 403] close(7) = -1 EBADF (Bad file descriptor) [ 55.983912][ T323] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 55.989797][ T318] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 55.997195][ T402] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 56.019339][ T403] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 56.025367][ T404] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 56.031347][ T405] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 56.038590][ T406] Bluetooth: hci0: Opcode 0x080f failed: -22 [pid 403] close(8) = -1 EBADF (Bad file descriptor) [pid 403] close(9) = -1 EBADF (Bad file descriptor) [pid 403] close(10) = -1 EBADF (Bad file descriptor) [pid 403] close(11) = -1 EBADF (Bad file descriptor) [pid 403] close(12) = -1 EBADF (Bad file descriptor) [pid 403] close(13) = -1 EBADF (Bad file descriptor) [pid 403] close(14) = -1 EBADF (Bad file descriptor) [pid 403] close(15) = -1 EBADF (Bad file descriptor) [pid 403] close(16) = -1 EBADF (Bad file descriptor) [pid 403] close(17) = -1 EBADF (Bad file descriptor) [pid 403] close(18) = -1 EBADF (Bad file descriptor) [pid 403] close(19) = -1 EBADF (Bad file descriptor) [pid 403] close(20) = -1 EBADF (Bad file descriptor) [pid 403] close(21) = -1 EBADF (Bad file descriptor) [pid 403] close(22) = -1 EBADF (Bad file descriptor) [pid 403] close(23) = -1 EBADF (Bad file descriptor) [pid 403] close(24) = -1 EBADF (Bad file descriptor) [pid 403] close(25) = -1 EBADF (Bad file descriptor) [pid 403] close(26) = -1 EBADF (Bad file descriptor) [pid 403] close(27) = -1 EBADF (Bad file descriptor) [pid 403] close(28) = -1 EBADF (Bad file descriptor) [pid 403] close(29) = -1 EBADF (Bad file descriptor) [pid 403] exit_group(0) = ? [pid 406] <... close resumed>) = 0 [pid 404] close(4 [pid 403] +++ exited with 0 +++ [pid 402] <... close resumed>) = 0 [pid 405] close(4 [pid 404] <... close resumed>) = 0 [pid 406] close(4 [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 405] <... close resumed>) = 0 [pid 406] <... close resumed>) = 0 [pid 406] close(5 [pid 405] close(5 [pid 404] close(5 [pid 402] close(4 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] <... close resumed>) = 0 [pid 304] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 404] close(6 [pid 406] close(6 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(6 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(5 [pid 406] close(7 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(7 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(7 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(6 [pid 406] close(8 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(8 [pid 304] <... openat resumed>) = 3 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(8 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] newfstatat(3, "", [pid 406] close(9 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(9 [pid 402] close(7 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(9 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(10 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(10 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(10 [pid 402] close(8 [pid 304] getdents64(3, [pid 406] close(11 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 406] close(12 [pid 405] close(11 [pid 404] close(11 [pid 304] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(9 [pid 406] close(13 [pid 405] close(12 [pid 404] close(12 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] newfstatat(AT_FDCWD, "./10/binderfs", [pid 406] close(14 [pid 405] close(13 [pid 404] close(13 [pid 402] close(10 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 406] close(15 [pid 405] close(14 [pid 404] close(14 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] unlink("./10/binderfs" [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(11 [pid 406] close(16 [pid 405] close(15 [pid 404] close(15 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... unlink resumed>) = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(12 [pid 304] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 406] close(17 [pid 405] close(16 [pid 404] close(16 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(13 [pid 304] newfstatat(AT_FDCWD, "./10/cgroup.net", [pid 406] close(18 [pid 405] close(17 [pid 404] close(17 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(14 [pid 304] unlink("./10/cgroup.net" [pid 406] close(19 [pid 405] close(18 [pid 404] close(18 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... unlink resumed>) = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(15 [pid 304] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 406] close(20 [pid 405] close(19 [pid 404] close(19 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(16 [pid 304] newfstatat(AT_FDCWD, "./10/cgroup.cpu", [pid 406] close(21 [pid 405] close(20 [pid 404] close(20 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(17 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 406] close(22 [pid 405] close(21 [pid 404] close(21 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] unlink("./10/cgroup.cpu" [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(18 [pid 406] close(23 [pid 405] close(22 [pid 404] close(22 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... unlink resumed>) = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(23 [pid 402] close(19 [pid 406] close(24 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(23 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(24 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(20 [pid 406] close(25 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] close(25 [pid 404] close(24 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(26 [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(21 [pid 304] newfstatat(AT_FDCWD, "./10/cgroup", [pid 405] close(26 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(25 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 406] close(27 [pid 405] close(27 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(22 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(26 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] unlink("./10/cgroup" [pid 406] close(28 [pid 405] close(28 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(23 [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(27 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... unlink resumed>) = 0 [pid 406] close(29 [pid 405] close(29 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(24 [pid 304] getdents64(3, [pid 406] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 405] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(28 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 406] exit_group(0 [pid 405] exit_group(0 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(25 [pid 406] <... exit_group resumed>) = ? [pid 405] <... exit_group resumed>) = ? [pid 304] close(3 [pid 406] +++ exited with 0 +++ [pid 405] +++ exited with 0 +++ [pid 404] close(29 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = 0 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] close(26 [pid 304] rmdir("./10" [pid 404] exit_group(0 [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 304] <... rmdir resumed>) = 0 [pid 402] close(27 [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 404] <... exit_group resumed>) = ? [pid 402] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] mkdir("./11", 0777 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 402] close(28) = -1 EBADF (Bad file descriptor) [pid 402] close(29) = -1 EBADF (Bad file descriptor) [pid 402] exit_group(0) = ? [pid 404] +++ exited with 0 +++ [pid 402] +++ exited with 0 +++ [pid 305] <... restart_syscall resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 410 attached [pid 304] <... clone resumed>, child_tidptr=0x55558827a650) = 13 [pid 305] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... openat resumed>) = 3 [pid 306] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(3, "", [pid 410] set_robust_list(0x55558827a660, 24 [pid 307] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 410] <... set_robust_list resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... openat resumed>) = 3 [pid 301] getdents64(3, [pid 410] chdir("./11" [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 307] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... openat resumed>) = 3 [pid 305] newfstatat(3, "", [pid 410] <... chdir resumed>) = 0 [pid 301] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] <... openat resumed>) = 3 [pid 306] newfstatat(3, "", [pid 305] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 410] <... prctl resumed>) = 0 [pid 307] newfstatat(3, "", [pid 306] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 301] newfstatat(AT_FDCWD, "./9/binderfs", [pid 410] setpgid(0, 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 306] getdents64(3, [pid 305] getdents64(3, [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 410] <... setpgid resumed>) = 0 [pid 307] getdents64(3, [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 301] unlink("./9/binderfs" [pid 410] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 306] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... unlink resumed>) = 0 [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 305] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 410] <... symlink resumed>) = 0 [pid 307] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 410] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./10/binderfs", [pid 305] newfstatat(AT_FDCWD, "./10/binderfs", [pid 301] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 410] <... symlink resumed>) = 0 [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./9/cgroup.net" [pid 410] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 307] newfstatat(AT_FDCWD, "./9/binderfs", [pid 306] unlink("./10/binderfs" [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... unlink resumed>) = 0 [pid 301] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 410] <... symlink resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] <... unlink resumed>) = 0 [pid 305] unlink("./10/binderfs" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./9/cgroup.cpu" [pid 410] <... openat resumed>) = 3 [pid 307] unlink("./9/binderfs" [pid 306] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... unlink resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 410] write(3, "1000", 4 [pid 307] <... unlink resumed>) = 0 [pid 301] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 410] <... write resumed>) = 4 [pid 307] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] newfstatat(AT_FDCWD, "./10/cgroup.net", [pid 305] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 410] close(3 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./9/cgroup", [pid 410] <... close resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 410] symlink("/dev/binderfs", "./binderfs" [pid 307] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 306] unlink("./10/cgroup.net" [pid 305] newfstatat(AT_FDCWD, "./10/cgroup.net", [pid 301] unlink("./9/cgroup" [pid 410] <... symlink resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] getdents64(3, [pid 306] <... unlink resumed>) = 0 [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 executing program [pid 410] write(1, "executing program\n", 18 [pid 307] unlink("./9/cgroup.net" [pid 306] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] close(3 [pid 410] <... write resumed>) = 18 [pid 307] <... unlink resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] unlink("./10/cgroup.net" [pid 301] <... close resumed>) = 0 [pid 410] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 307] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] newfstatat(AT_FDCWD, "./10/cgroup.cpu", [pid 301] rmdir("./9" [pid 305] <... unlink resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 301] mkdir("./10", 0777 [pid 410] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 410] setns(201, 0 [pid 305] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... mkdir resumed>) = 0 [pid 410] <... setns resumed>) = 0 [pid 307] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 306] unlink("./10/cgroup.cpu" [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 410] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] <... unlink resumed>) = 0 [pid 305] newfstatat(AT_FDCWD, "./10/cgroup.cpu", ./strace-static-x86_64: Process 411 attached [pid 411] set_robust_list(0x55558827a660, 24 [pid 301] <... clone resumed>, child_tidptr=0x55558827a650) = 12 [pid 411] <... set_robust_list resumed>) = 0 [pid 410] <... socket resumed>) = 4 [pid 307] unlink("./9/cgroup.cpu" [pid 306] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 411] chdir("./10" [pid 410] setns(3, 0 [pid 307] <... unlink resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] unlink("./10/cgroup.cpu" [pid 411] <... chdir resumed>) = 0 [pid 410] <... setns resumed>) = 0 [pid 307] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] newfstatat(AT_FDCWD, "./10/cgroup", [pid 411] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 410] close(3 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... unlink resumed>) = 0 [pid 411] <... prctl resumed>) = 0 [pid 410] <... close resumed>) = 0 [pid 307] newfstatat(AT_FDCWD, "./9/cgroup", [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 411] setpgid(0, 0 [pid 305] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 411] <... setpgid resumed>) = 0 [pid 410] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./10/cgroup" [pid 411] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 411] <... symlink resumed>) = 0 [pid 411] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 411] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 410] <... openat resumed>) = 3 [pid 307] unlink("./9/cgroup" [pid 306] <... unlink resumed>) = 0 [pid 305] newfstatat(AT_FDCWD, "./10/cgroup", [pid 411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 410] ioctl(3, TIOCSETD, [15] [pid 307] <... unlink resumed>) = 0 [pid 306] getdents64(3, [pid 411] <... openat resumed>) = 3 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 411] write(3, "1000", 4) = 4 [pid 411] close(3 [pid 410] <... ioctl resumed>) = 0 [pid 307] getdents64(3, [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 411] <... close resumed>) = 0 [pid 305] unlink("./10/cgroup" [pid 411] symlink("/dev/binderfs", "./binderfs"executing program [pid 410] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 306] close(3 [pid 411] <... symlink resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 411] write(1, "executing program\n", 18) = 18 [pid 411] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 411] setns(201, 0) = 0 [pid 411] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 411] setns(3, 0) = 0 [pid 411] close(3) = 0 [pid 410] <... ioctl resumed>, 0x4) = 0 [pid 307] close(3 [pid 306] <... close resumed>) = 0 [pid 305] getdents64(3, [pid 411] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 411] ioctl(3, TIOCSETD, [15]) = 0 [pid 411] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 411] ioctl(4, HCISETLINKPOL [pid 410] ioctl(4, HCISETLINKPOL [pid 307] <... close resumed>) = 0 [pid 307] rmdir("./9") = 0 [pid 307] mkdir("./10", 0777) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 12 [pid 306] rmdir("./10") = 0 [pid 306] mkdir("./11", 0777) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 13 [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./10") = 0 [pid 305] mkdir("./11", 0777) = 0 ./strace-static-x86_64: Process 413 attached ./strace-static-x86_64: Process 412 attached [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 413] set_robust_list(0x55558827a660, 24 [pid 412] set_robust_list(0x55558827a660, 24 [pid 413] <... set_robust_list resumed>) = 0 [pid 412] <... set_robust_list resumed>) = 0 [pid 413] chdir("./11" [pid 412] chdir("./10" [pid 413] <... chdir resumed>) = 0 [pid 412] <... chdir resumed>) = 0 [pid 413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 413] <... prctl resumed>) = 0 [pid 412] <... prctl resumed>) = 0 [pid 413] setpgid(0, 0 [pid 412] setpgid(0, 0 [pid 413] <... setpgid resumed>) = 0 [pid 412] <... setpgid resumed>) = 0 [pid 413] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 412] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 413] <... symlink resumed>) = 0 [pid 412] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 414 attached [pid 413] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 412] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 414] set_robust_list(0x55558827a660, 24 [pid 413] <... symlink resumed>) = 0 [pid 305] <... clone resumed>, child_tidptr=0x55558827a650) = 13 [pid 414] <... set_robust_list resumed>) = 0 [pid 413] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 412] <... symlink resumed>) = 0 [pid 414] chdir("./11" [pid 412] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 414] <... chdir resumed>) = 0 [pid 413] <... symlink resumed>) = 0 [pid 412] <... symlink resumed>) = 0 [pid 414] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 414] <... prctl resumed>) = 0 [pid 414] setpgid(0, 0 [pid 413] <... openat resumed>) = 3 [pid 412] <... openat resumed>) = 3 [pid 414] <... setpgid resumed>) = 0 [pid 413] write(3, "1000", 4 [pid 412] write(3, "1000", 4 [pid 414] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 413] <... write resumed>) = 4 [pid 412] <... write resumed>) = 4 [pid 414] <... symlink resumed>) = 0 [pid 413] close(3 [pid 412] close(3 [pid 414] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 413] <... close resumed>) = 0 [pid 412] <... close resumed>) = 0 [pid 413] symlink("/dev/binderfs", "./binderfs" [pid 414] <... symlink resumed>) = 0 [pid 413] <... symlink resumed>) = 0 [pid 412] symlink("/dev/binderfs", "./binderfs" [pid 414] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 413] write(1, "executing program\n", 18executing program [pid 412] <... symlink resumed>) = 0 [pid 414] <... symlink resumed>) = 0 [pid 413] <... write resumed>) = 18 [pid 412] write(1, "executing program\n", 18executing program [pid 414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 413] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 412] <... write resumed>) = 18 [pid 414] <... openat resumed>) = 3 [pid 412] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 414] write(3, "1000", 4 [pid 413] <... openat resumed>) = 3 [pid 412] <... openat resumed>) = 3 [pid 414] <... write resumed>) = 4 [pid 413] setns(201, 0 [pid 414] close(3 [pid 412] setns(201, 0 [pid 414] <... close resumed>) = 0 [pid 413] <... setns resumed>) = 0 [pid 412] <... setns resumed>) = 0 [pid 414] symlink("/dev/binderfs", "./binderfs" [pid 413] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 412] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 414] <... symlink resumed>) = 0 executing program [pid 413] <... socket resumed>) = 4 [pid 412] <... socket resumed>) = 4 [pid 414] write(1, "executing program\n", 18 [pid 413] setns(3, 0 [pid 412] setns(3, 0 [pid 414] <... write resumed>) = 18 [pid 413] <... setns resumed>) = 0 [pid 412] <... setns resumed>) = 0 [pid 414] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 413] close(3 [pid 412] close(3 [pid 414] <... openat resumed>) = 3 [pid 413] <... close resumed>) = 0 [pid 412] <... close resumed>) = 0 [pid 414] setns(201, 0 [pid 413] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 412] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 414] <... setns resumed>) = 0 [pid 413] <... openat resumed>) = 3 [pid 414] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 413] ioctl(3, TIOCSETD, [15] [pid 412] <... openat resumed>) = 3 [pid 414] <... socket resumed>) = 4 [pid 413] <... ioctl resumed>) = 0 [pid 412] ioctl(3, TIOCSETD, [15] [pid 414] setns(3, 0 [pid 413] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 412] <... ioctl resumed>) = 0 [pid 414] <... setns resumed>) = 0 [pid 414] close(3 [pid 413] <... ioctl resumed>, 0x4) = 0 [pid 412] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 414] <... close resumed>) = 0 [pid 414] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 414] ioctl(3, TIOCSETD, [15]) = 0 [pid 414] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 414] ioctl(4, HCISETLINKPOL [pid 413] ioctl(4, HCISETLINKPOL [pid 412] <... ioctl resumed>, 0x4) = 0 [ 56.113463][ T361] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.119736][ T393] Bluetooth: hci1: Frame reassembly failed (-84) [ 56.135408][ T393] Bluetooth: hci2: Frame reassembly failed (-84) [ 56.141772][ T8] Bluetooth: hci3: Frame reassembly failed (-84) [ 56.142546][ T393] Bluetooth: hci4: Frame reassembly failed (-84) [pid 412] ioctl(4, HCISETLINKPOL [pid 411] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 411] close(3 [pid 410] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [ 58.114515][ T317] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 58.114537][ T323] Bluetooth: hci1: command 0x1003 tx timeout [ 58.114558][ T323] Bluetooth: hci0: command 0x1003 tx timeout [ 58.120594][ T318] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.138219][ T411] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 58.144528][ T410] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 58.150636][ T414] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 58.156771][ T413] Bluetooth: hci0: Opcode 0x080f failed: -22 [pid 410] close(3 [pid 414] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 414] close(3 [pid 413] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [pid 413] close(3 [pid 412] <... ioctl resumed>, 0x400000000300) = -1 EINVAL (Invalid argument) [ 58.162844][ T412] Bluetooth: hci0: Opcode 0x080f failed: -22 [pid 412] close(3 [pid 411] <... close resumed>) = 0 [pid 411] close(4) = 0 [pid 411] close(5) = -1 EBADF (Bad file descriptor) [pid 411] close(6) = -1 EBADF (Bad file descriptor) [pid 411] close(7) = -1 EBADF (Bad file descriptor) [pid 411] close(8) = -1 EBADF (Bad file descriptor) [pid 411] close(9) = -1 EBADF (Bad file descriptor) [pid 411] close(10) = -1 EBADF (Bad file descriptor) [pid 411] close(11) = -1 EBADF (Bad file descriptor) [pid 411] close(12) = -1 EBADF (Bad file descriptor) [pid 411] close(13) = -1 EBADF (Bad file descriptor) [pid 411] close(14) = -1 EBADF (Bad file descriptor) [pid 411] close(15) = -1 EBADF (Bad file descriptor) [pid 411] close(16) = -1 EBADF (Bad file descriptor) [pid 411] close(17) = -1 EBADF (Bad file descriptor) [pid 411] close(18) = -1 EBADF (Bad file descriptor) [pid 411] close(19) = -1 EBADF (Bad file descriptor) [pid 411] close(20) = -1 EBADF (Bad file descriptor) [pid 411] close(21) = -1 EBADF (Bad file descriptor) [pid 411] close(22) = -1 EBADF (Bad file descriptor) [pid 411] close(23) = -1 EBADF (Bad file descriptor) [pid 411] close(24) = -1 EBADF (Bad file descriptor) [pid 412] <... close resumed>) = 0 [pid 412] close(4) = 0 [pid 412] close(5) = -1 EBADF (Bad file descriptor) [pid 412] close(6 [pid 411] close(25 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(7) = -1 EBADF (Bad file descriptor) [pid 412] close(8) = -1 EBADF (Bad file descriptor) [pid 412] close(9) = -1 EBADF (Bad file descriptor) [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(10) = -1 EBADF (Bad file descriptor) [pid 412] close(11 [pid 411] close(26 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(12) = -1 EBADF (Bad file descriptor) [pid 412] close(13 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(14 [pid 411] close(27 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(15 [pid 411] close(28 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(16 [pid 411] close(29 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(17) = -1 EBADF (Bad file descriptor) [pid 412] close(18) = -1 EBADF (Bad file descriptor) [pid 412] close(19) = -1 EBADF (Bad file descriptor) [pid 412] close(20 [pid 411] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(21) = -1 EBADF (Bad file descriptor) [pid 412] close(22) = -1 EBADF (Bad file descriptor) [pid 412] close(23) = -1 EBADF (Bad file descriptor) [pid 412] close(24) = -1 EBADF (Bad file descriptor) [pid 412] close(25 [pid 411] exit_group(0 [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(26 [pid 411] <... exit_group resumed>) = ? [pid 412] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 412] close(27) = -1 EBADF (Bad file descriptor) [pid 412] close(28) = -1 EBADF (Bad file descriptor) [pid 412] close(29) = -1 EBADF (Bad file descriptor) [pid 412] exit_group(0) = ? [pid 412] +++ exited with 0 +++ [pid 411] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 413] <... close resumed>) = 0 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 413] close(4) = 0 [pid 413] close(5) = -1 EBADF (Bad file descriptor) [pid 413] close(6) = -1 EBADF (Bad file descriptor) [pid 413] close(7) = -1 EBADF (Bad file descriptor) [pid 413] close(8) = -1 EBADF (Bad file descriptor) [pid 413] close(9) = -1 EBADF (Bad file descriptor) [pid 413] close(10) = -1 EBADF (Bad file descriptor) [pid 413] close(11) = -1 EBADF (Bad file descriptor) [pid 413] close(12) = -1 EBADF (Bad file descriptor) [pid 413] close(13) = -1 EBADF (Bad file descriptor) [pid 413] close(14) = -1 EBADF (Bad file descriptor) [pid 413] close(15) = -1 EBADF (Bad file descriptor) [pid 413] close(16) = -1 EBADF (Bad file descriptor) [pid 413] close(17) = -1 EBADF (Bad file descriptor) [pid 413] close(18) = -1 EBADF (Bad file descriptor) [pid 413] close(19) = -1 EBADF (Bad file descriptor) [pid 413] close(20) = -1 EBADF (Bad file descriptor) [pid 413] close(21) = -1 EBADF (Bad file descriptor) [pid 413] close(22) = -1 EBADF (Bad file descriptor) [pid 413] close(23) = -1 EBADF (Bad file descriptor) [pid 413] close(24) = -1 EBADF (Bad file descriptor) [pid 413] close(25) = -1 EBADF (Bad file descriptor) [pid 413] close(26) = -1 EBADF (Bad file descriptor) [pid 413] close(27) = -1 EBADF (Bad file descriptor) [pid 413] close(28) = -1 EBADF (Bad file descriptor) [pid 413] close(29) = -1 EBADF (Bad file descriptor) [pid 413] exit_group(0) = ? [pid 413] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 410] <... close resumed>) = 0 [pid 414] <... close resumed>) = 0 [pid 410] close(4 [pid 414] close(4) = 0 [pid 410] <... close resumed>) = 0 [pid 414] close(5) = -1 EBADF (Bad file descriptor) [pid 410] close(5 [pid 414] close(6 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 414] close(7 [pid 410] close(6 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 414] close(8 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 414] close(9 [pid 410] close(7 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 414] close(10 [pid 301] <... restart_syscall resumed>) = 0 [pid 410] close(8 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 414] close(11 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... restart_syscall resumed>) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(9 [pid 301] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 414] close(12 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(10 [pid 307] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 414] close(13 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... openat resumed>) = 3 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(11 [pid 307] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] newfstatat(3, "", [pid 414] close(14 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... openat resumed>) = 3 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(12 [pid 307] newfstatat(3, "", [pid 306] <... restart_syscall resumed>) = 0 [pid 301] getdents64(3, [pid 414] close(15 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(13 [pid 307] getdents64(3, [pid 301] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 414] close(16 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 306] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(14 [pid 307] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./10/binderfs", [pid 414] close(17 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(15 [pid 307] newfstatat(AT_FDCWD, "./10/binderfs", [pid 306] <... openat resumed>) = 3 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 414] close(18 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] newfstatat(3, "", [pid 301] unlink("./10/binderfs" [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(16 [pid 307] unlink("./10/binderfs" [pid 306] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 414] close(19 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... unlink resumed>) = 0 [pid 306] getdents64(3, [pid 301] <... unlink resumed>) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(17 [pid 307] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 301] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 414] close(20 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(18 [pid 307] newfstatat(AT_FDCWD, "./10/cgroup.net", [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 414] close(21 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] newfstatat(AT_FDCWD, "./11/binderfs", [pid 301] newfstatat(AT_FDCWD, "./10/cgroup.net", [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(19 [pid 307] unlink("./10/cgroup.net" [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 414] close(22 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... unlink resumed>) = 0 [pid 306] unlink("./11/binderfs" [pid 301] unlink("./10/cgroup.net" [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(20 [pid 307] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... unlink resumed>) = 0 [pid 414] close(23 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... unlink resumed>) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(21 [pid 307] newfstatat(AT_FDCWD, "./10/cgroup.cpu", [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 414] close(24 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] newfstatat(AT_FDCWD, "./11/cgroup.net", [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(22 [pid 307] unlink("./10/cgroup.cpu" [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] newfstatat(AT_FDCWD, "./10/cgroup.cpu", [pid 414] close(25 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... unlink resumed>) = 0 [pid 306] unlink("./11/cgroup.net" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(23 [pid 307] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... unlink resumed>) = 0 [pid 301] unlink("./10/cgroup.cpu" [pid 414] close(26 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(24 [pid 307] newfstatat(AT_FDCWD, "./10/cgroup", [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... unlink resumed>) = 0 [pid 414] close(27 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] newfstatat(AT_FDCWD, "./11/cgroup.cpu", [pid 301] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(25 [pid 307] unlink("./10/cgroup" [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 414] close(28 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... unlink resumed>) = 0 [pid 306] unlink("./11/cgroup.cpu" [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(26 [pid 307] getdents64(3, [pid 306] <... unlink resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./10/cgroup", [pid 414] close(29 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 306] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 414] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(27 [pid 307] close(3 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] unlink("./10/cgroup" [pid 414] exit_group(0 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = 0 [pid 306] newfstatat(AT_FDCWD, "./11/cgroup", [pid 301] <... unlink resumed>) = 0 [pid 414] <... exit_group resumed>) = ? [pid 410] close(28 [pid 307] rmdir("./10" [pid 306] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] getdents64(3, [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... rmdir resumed>) = 0 [pid 301] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 410] close(29 [pid 307] mkdir("./11", 0777 [pid 301] close(3 [pid 414] +++ exited with 0 +++ [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... mkdir resumed>) = 0 [pid 306] unlink("./11/cgroup" [pid 301] <... close resumed>) = 0 [pid 410] exit_group(0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... unlink resumed>) = 0 [pid 410] <... exit_group resumed>) = ? [pid 306] getdents64(3, [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 301] rmdir("./10" [pid 306] <... getdents64 resumed>0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./11"./strace-static-x86_64: Process 417 attached ) = 0 [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 301] <... rmdir resumed>) = 0 [pid 417] set_robust_list(0x55558827a660, 24 [pid 306] mkdir("./12", 0777 [pid 417] <... set_robust_list resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 417] chdir("./11" [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 417] <... chdir resumed>) = 0 [pid 410] +++ exited with 0 +++ [pid 307] <... clone resumed>, child_tidptr=0x55558827a650) = 13 [pid 305] <... restart_syscall resumed>) = 0 [pid 301] mkdir("./11", 0777./strace-static-x86_64: Process 418 attached [pid 417] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] <... mkdir resumed>) = 0 [pid 418] set_robust_list(0x55558827a660, 24 [pid 417] <... prctl resumed>) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55558827a650) = 14 [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 418] <... set_robust_list resumed>) = 0 [pid 417] setpgid(0, 0 [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 418] chdir("./12" [pid 417] <... setpgid resumed>) = 0 [pid 305] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 419 attached [pid 418] <... chdir resumed>) = 0 [pid 417] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 419] set_robust_list(0x55558827a660, 24 [pid 418] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 417] <... symlink resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... clone resumed>, child_tidptr=0x55558827a650) = 13 [pid 419] <... set_robust_list resumed>) = 0 [pid 418] <... prctl resumed>) = 0 [pid 417] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 305] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 419] chdir("./11" [pid 418] setpgid(0, 0 [pid 305] <... openat resumed>) = 3 [pid 417] <... symlink resumed>) = 0 [pid 419] <... chdir resumed>) = 0 [pid 418] <... setpgid resumed>) = 0 [pid 417] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 305] newfstatat(3, "", [pid 419] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 418] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 305] getdents64(3, [pid 419] <... prctl resumed>) = 0 [pid 417] <... symlink resumed>) = 0 [pid 305] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 418] <... symlink resumed>) = 0 [pid 305] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 419] setpgid(0, 0 [pid 418] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 419] <... setpgid resumed>) = 0 [pid 418] <... symlink resumed>) = 0 [pid 305] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./11/binderfs") = 0 [pid 305] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./11/cgroup.net" [pid 417] <... openat resumed>) = 3 [pid 305] <... unlink resumed>) = 0 [pid 305] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 419] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 418] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 417] write(3, "1000", 4 [pid 305] newfstatat(AT_FDCWD, "./11/cgroup.cpu", [pid 419] <... symlink resumed>) = 0 [pid 418] <... symlink resumed>) = 0 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 419] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 417] <... write resumed>) = 4 [pid 305] unlink("./11/cgroup.cpu" [pid 419] <... symlink resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 305] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./11/cgroup", [pid 419] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 418] <... openat resumed>) = 3 [pid 417] close(3 [pid 305] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 419] <... symlink resumed>) = 0 [pid 418] write(3, "1000", 4 [pid 305] unlink("./11/cgroup" [pid 419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 418] <... write resumed>) = 4 [pid 417] <... close resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 305] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 419] <... openat resumed>) = 3 [pid 418] close(3 [pid 417] symlink("/dev/binderfs", "./binderfs" [pid 305] close(3 [pid 419] write(3, "1000", 4 [pid 418] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 419] <... write resumed>) = 4 [pid 418] symlink("/dev/binderfs", "./binderfs" [pid 417] <... symlink resumed>) = 0 [pid 305] rmdir("./11" [pid 419] close(3 [pid 418] <... symlink resumed>) = 0 [pid 417] write(1, "executing program\n", 18 [pid 305] <... rmdir resumed>) = 0 executing program executing program [pid 419] <... close resumed>) = 0 [pid 418] write(1, "executing program\n", 18 [pid 417] <... write resumed>) = 18 [pid 305] mkdir("./12", 0777 [pid 419] symlink("/dev/binderfs", "./binderfs" [pid 418] <... write resumed>) = 18 [pid 417] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 305] <... mkdir resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 419] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 420 attached [pid 419] write(1, "executing program\n", 18 executing program [pid 418] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 417] <... openat resumed>) = 3 [pid 420] set_robust_list(0x55558827a660, 24 [pid 419] <... write resumed>) = 18 [pid 305] <... clone resumed>, child_tidptr=0x55558827a650) = 14 [pid 420] <... set_robust_list resumed>) = 0 [pid 420] chdir("./12" [pid 418] <... openat resumed>) = 3 [pid 420] <... chdir resumed>) = 0 [pid 419] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY [pid 417] setns(201, 0 [pid 304] <... restart_syscall resumed>) = 0 [pid 420] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 418] setns(201, 0 [pid 420] <... prctl resumed>) = 0 [pid 420] setpgid(0, 0 [pid 419] <... openat resumed>) = 3 [pid 420] <... setpgid resumed>) = 0 [pid 419] setns(201, 0 [pid 418] <... setns resumed>) = 0 [pid 417] <... setns resumed>) = 0 [pid 420] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 419] <... setns resumed>) = 0 [pid 418] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 417] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 420] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 419] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 418] <... socket resumed>) = 4 [pid 420] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 417] <... socket resumed>) = 4 [pid 420] <... symlink resumed>) = 0 [pid 419] <... socket resumed>) = 4 [pid 418] setns(3, 0 [pid 417] setns(3, 0 [pid 304] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 419] setns(3, 0 [pid 418] <... setns resumed>) = 0 [pid 417] <... setns resumed>) = 0 [pid 420] <... openat resumed>) = 3 executing program [pid 419] <... setns resumed>) = 0 [pid 418] close(3 [pid 417] close(3 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 420] write(3, "1000", 4 [pid 419] close(3 [pid 420] <... write resumed>) = 4 [pid 418] <... close resumed>) = 0 [pid 417] <... close resumed>) = 0 [pid 419] <... close resumed>) = 0 [pid 304] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 420] close(3 [pid 418] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 420] <... close resumed>) = 0 [pid 417] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 420] symlink("/dev/binderfs", "./binderfs") = 0 [pid 419] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 304] <... openat resumed>) = 3 [pid 420] write(1, "executing program\n", 18) = 18 [pid 420] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 417] <... openat resumed>) = 3 [pid 304] newfstatat(3, "", [pid 420] setns(201, 0) = 0 [pid 420] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 418] <... openat resumed>) = 3 [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=120, ...}, AT_EMPTY_PATH) = 0 [pid 420] setns(3, 0) = 0 [pid 420] close(3 [pid 419] <... openat resumed>) = 3 [pid 420] <... close resumed>) = 0 [pid 418] ioctl(3, TIOCSETD, [15] [pid 419] ioctl(3, TIOCSETD, [15] [pid 417] ioctl(3, TIOCSETD, [15] [pid 304] getdents64(3, [pid 420] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY [pid 418] <... ioctl resumed>) = 0 [pid 420] <... openat resumed>) = 3 [pid 419] <... ioctl resumed>) = 0 [pid 418] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 417] <... ioctl resumed>) = 0 [pid 304] <... getdents64 resumed>0x55558827b6f0 /* 6 entries */, 32768) = 176 [pid 420] ioctl(3, TIOCSETD, [15] [pid 419] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4) [pid 420] <... ioctl resumed>) = 0 [pid 420] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 418] <... ioctl resumed>, 0x4) = 0 [pid 304] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 420] ioctl(4, HCISETLINKPOL [pid 417] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [pid 417] ioctl(4, HCISETLINKPOL [pid 419] <... ioctl resumed>, 0x4) = 0 [ 58.194515][ T315] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 58.194578][ T318] Bluetooth: hci4: command 0x1003 tx timeout [ 58.200473][ T315] Bluetooth: hci2: command 0x1003 tx timeout [ 58.202808][ T311] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 58.206490][ T309] Bluetooth: hci2: Opcode 0x1003 failed: -110 [pid 419] ioctl(4, HCISETLINKPOL [pid 418] ioctl(4, HCISETLINKPOL [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./11/binderfs") = 0 [pid 304] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./11/cgroup.net") = 0 [pid 304] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./11/cgroup.cpu") = 0 [pid 304] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./11/cgroup") = 0 [pid 304] getdents64(3, 0x55558827b6f0 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [pid 304] rmdir("./11") = 0 [pid 304] mkdir("./12", 0777) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558827a650) = 14 ./strace-static-x86_64: Process 421 attached [pid 421] set_robust_list(0x55558827a660, 24) = 0 [pid 421] chdir("./12") = 0 [pid 421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 421] setpgid(0, 0) = 0 [pid 421] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 421] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 421] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 421] write(3, "1000", 4) = 4 [pid 421] close(3) = 0 [pid 421] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 421] write(1, "executing program\n", 18) = 18 [pid 421] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 421] setns(201, 0) = 0 [pid 421] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 4 [pid 421] setns(3, 0) = 0 [pid 421] close(3) = 0 [pid 421] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 421] ioctl(3, TIOCSETD, [15]) = 0 [pid 421] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0x4) = 0 [ 58.268626][ T393] Bluetooth: hci0: Frame reassembly failed (-84) [ 58.274924][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 58.281550][ T361] Bluetooth: hci2: Frame reassembly failed (-84) [ 58.290675][ T8] Bluetooth: hci3: Frame reassembly failed (-84) [ 58.293670][ T361] Bluetooth: hci4: Frame reassembly failed (-84) [ 60.194464][ C0] ================================================================== [ 60.202354][ C0] BUG: KASAN: use-after-free in __run_timers+0x34a/0xa10 [ 60.209205][ C0] Write of size 8 at addr ffff888113d54a00 by task swapper/0/0 [ 60.216585][ C0] [ 60.218762][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.124-syzkaller-00008-gccc915784332 #0 [ 60.228048][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 60.238083][ C0] Call Trace: [ 60.241195][ C0] [ 60.244063][ C0] dump_stack_lvl+0x151/0x1b7 [ 60.248584][ C0] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 60.253863][ C0] ? _printk+0xd1/0x111 [ 60.257858][ C0] ? __virt_addr_valid+0x242/0x2f0 [ 60.262815][ C0] print_report+0x158/0x4e0 [ 60.267146][ C0] ? __virt_addr_valid+0x242/0x2f0 [ 60.272107][ C0] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 60.274561][ T309] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.278169][ C0] ? __run_timers+0x34a/0xa10 [ 60.288729][ C0] kasan_report+0x13c/0x170 [ 60.293243][ C0] ? __run_timers+0x34a/0xa10 [ 60.297859][ C0] __asan_report_store8_noabort+0x17/0x20 [ 60.303414][ C0] __run_timers+0x34a/0xa10 [ 60.307749][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 60.312782][ C0] ? calc_index+0x270/0x270 [ 60.317121][ C0] ? sched_clock+0x9/0x10 [ 60.321284][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 60.325972][ C0] run_timer_softirq+0x69/0xf0 [ 60.330574][ C0] handle_softirqs+0x1db/0x650 [ 60.335203][ C0] ? irqtime_account_irq+0xdc/0x260 [ 60.340345][ C0] __irq_exit_rcu+0x52/0xf0 [ 60.344678][ C0] irq_exit_rcu+0x9/0x10 [ 60.348745][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 60.354214][ C0] [ 60.356989][ C0] [ 60.359770][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 60.365594][ C0] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 60.370964][ C0] Code: 89 de 48 83 e6 08 31 ff e8 e7 46 53 fc 48 83 e3 08 0f 85 b1 00 00 00 0f 1f 44 00 00 e8 93 42 53 fc 0f 00 2d cc 12 ce 00 fb f4 e9 e3 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 60.390500][ C0] RSP: 0018:ffffffff87007bd0 EFLAGS: 000002d3 [ 60.396401][ C0] RAX: ffffffff8522522d RBX: 0000000000000000 RCX: ffffffff8701d580 [ 60.404208][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.412022][ C0] RBP: ffffffff87007c10 R08: ffffffff85225219 R09: fffffbfff0e03ab1 [ 60.419830][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 60.427639][ C0] R13: ffff888109ecc804 R14: dffffc0000000000 R15: ffff888109a57864 [ 60.435453][ C0] ? acpi_idle_enter+0x3f9/0x760 [ 60.440332][ C0] ? acpi_idle_enter+0x40d/0x760 [ 60.445106][ C0] ? intel_idle_xstate+0xa0/0xa0 [ 60.449886][ C0] cpuidle_enter_state+0x5eb/0x17f0 [ 60.454921][ C0] ? cpuidle_enter_s2idle+0x600/0x600 [ 60.460122][ C0] ? menu_enable_device+0x380/0x380 [ 60.465150][ C0] ? __sched_text_start+0x8/0x8 [ 60.469840][ C0] cpuidle_enter+0x5f/0xa0 [ 60.474094][ C0] do_idle+0x3d1/0x580 [ 60.477999][ C0] ? irqentry_exit+0x37/0x40 [ 60.482429][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 60.487463][ C0] ? schedule_idle+0x5b/0x90 [ 60.491882][ C0] ? do_idle+0x572/0x580 [ 60.495961][ C0] cpu_startup_entry+0x44/0x60 [ 60.500563][ C0] rest_init+0x10b/0x130 [ 60.504641][ C0] ? time_init+0x38/0x38 [ 60.508720][ C0] arch_call_rest_init+0xe/0xe [ 60.513413][ C0] start_kernel+0x46c/0x4d8 [ 60.517784][ C0] x86_64_start_reservations+0x2a/0x2c [ 60.523197][ C0] x86_64_start_kernel+0x7c/0x81 [ 60.527967][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 60.533695][ C0] [ 60.536558][ C0] [ 60.538730][ C0] Allocated by task 410: [ 60.542808][ C0] kasan_set_track+0x4b/0x70 [ 60.547370][ C0] kasan_save_alloc_info+0x1f/0x30 [ 60.552302][ C0] __kasan_kmalloc+0x9c/0xb0 [ 60.556728][ C0] __kmalloc+0xb4/0x1e0 [ 60.560830][ C0] hci_alloc_dev_priv+0x27/0x1c00 [ 60.565668][ C0] hci_uart_tty_ioctl+0x401/0xa70 [ 60.570536][ C0] tty_ioctl+0x903/0xc50 [ 60.574609][ C0] __se_sys_ioctl+0x114/0x190 [ 60.579126][ C0] __x64_sys_ioctl+0x7b/0x90 [ 60.583548][ C0] x64_sys_call+0x98/0x9a0 [ 60.587800][ C0] do_syscall_64+0x3b/0xb0 [ 60.592049][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.597779][ C0] [ 60.599957][ C0] Freed by task 412: [ 60.603683][ C0] kasan_set_track+0x4b/0x70 [ 60.608107][ C0] kasan_save_free_info+0x2b/0x40 [ 60.612967][ C0] ____kasan_slab_free+0x131/0x180 [ 60.617926][ C0] __kasan_slab_free+0x11/0x20 [ 60.622518][ C0] __kmem_cache_free+0x21d/0x410 [ 60.627289][ C0] kfree+0x7a/0xf0 [ 60.630854][ C0] hci_release_dev+0x14d3/0x1640 [ 60.635622][ C0] bt_host_release+0x83/0xa0 [ 60.640046][ C0] device_release+0x95/0x1c0 [ 60.644474][ C0] kobject_put+0x178/0x260 [ 60.648726][ C0] put_device+0x1f/0x30 [ 60.652721][ C0] hci_dev_cmd+0x2be/0x9b0 [ 60.656992][ C0] hci_sock_ioctl+0x415/0x7f0 [ 60.661485][ C0] sock_do_ioctl+0x152/0x450 [ 60.666047][ C0] sock_ioctl+0x455/0x740 [ 60.670214][ C0] __se_sys_ioctl+0x114/0x190 [ 60.674950][ C0] __x64_sys_ioctl+0x7b/0x90 [ 60.679377][ C0] x64_sys_call+0x98/0x9a0 [ 60.683624][ C0] do_syscall_64+0x3b/0xb0 [ 60.687874][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.693617][ C0] [ 60.695895][ C0] Last potentially related work creation: [ 60.701474][ C0] kasan_save_stack+0x3b/0x60 [ 60.706088][ C0] __kasan_record_aux_stack+0xb4/0xc0 [ 60.711304][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 60.716940][ C0] insert_work+0x56/0x310 [ 60.721101][ C0] __queue_work+0x9b6/0xd70 [ 60.725446][ C0] queue_work_on+0x105/0x170 [ 60.729869][ C0] __hci_cmd_sync_sk+0xc2a/0xf70 [ 60.734640][ C0] hci_cmd_sync_status+0x52/0x130 [ 60.739503][ C0] hci_dev_cmd+0x771/0x9b0 [ 60.743760][ C0] hci_sock_ioctl+0x415/0x7f0 [ 60.748267][ C0] sock_do_ioctl+0x152/0x450 [ 60.752696][ C0] sock_ioctl+0x455/0x740 [ 60.756856][ C0] __se_sys_ioctl+0x114/0x190 [ 60.761377][ C0] __x64_sys_ioctl+0x7b/0x90 [ 60.765803][ C0] x64_sys_call+0x98/0x9a0 [ 60.770057][ C0] do_syscall_64+0x3b/0xb0 [ 60.774306][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.780032][ C0] [ 60.782198][ C0] Second to last potentially related work creation: [ 60.788863][ C0] kasan_save_stack+0x3b/0x60 [ 60.793373][ C0] __kasan_record_aux_stack+0xb4/0xc0 [ 60.798578][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 60.804219][ C0] insert_work+0x56/0x310 [ 60.808386][ C0] __queue_work+0x9b6/0xd70 [ 60.812722][ C0] queue_work_on+0x105/0x170 [ 60.817149][ C0] __hci_cmd_sync_sk+0xc2a/0xf70 [ 60.821923][ C0] hci_cmd_sync_status+0x52/0x130 [ 60.826785][ C0] hci_dev_cmd+0x771/0x9b0 [ 60.831048][ C0] hci_sock_ioctl+0x415/0x7f0 [ 60.835553][ C0] sock_do_ioctl+0x152/0x450 [ 60.839980][ C0] sock_ioctl+0x455/0x740 [ 60.844145][ C0] __se_sys_ioctl+0x114/0x190 [ 60.848655][ C0] __x64_sys_ioctl+0x7b/0x90 [ 60.853083][ C0] x64_sys_call+0x98/0x9a0 [ 60.857334][ C0] do_syscall_64+0x3b/0xb0 [ 60.861587][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.867320][ C0] [ 60.869487][ C0] The buggy address belongs to the object at ffff888113d54000 [ 60.869487][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 60.883373][ C0] The buggy address is located 2560 bytes inside of [ 60.883373][ C0] 8192-byte region [ffff888113d54000, ffff888113d56000) [ 60.896651][ C0] [ 60.898823][ C0] The buggy address belongs to the physical page: [ 60.905085][ C0] page:ffffea00044f5400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113d50 [ 60.915142][ C0] head:ffffea00044f5400 order:3 compound_mapcount:0 compound_pincount:0 [ 60.923398][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 60.929307][ C0] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500 [ 60.937724][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 60.946136][ C0] page dumped because: kasan: bad access detected [ 60.952404][ C0] page_owner tracks the page as allocated [ 60.957939][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 405, tgid 405 (syz-executor219), ts 53930766407, free_ts 53929141704 [ 60.980594][ C0] post_alloc_hook+0x213/0x220 [ 60.985189][ C0] prep_new_page+0x1b/0x110 [ 60.989529][ C0] get_page_from_freelist+0x3a98/0x3b10 [ 60.994916][ C0] __alloc_pages+0x234/0x610 [ 60.999339][ C0] alloc_slab_page+0x6c/0xf0 [ 61.003764][ C0] new_slab+0x90/0x3e0 [ 61.007670][ C0] ___slab_alloc+0x6f9/0xb80 [ 61.012096][ C0] __slab_alloc+0x5d/0xa0 [ 61.016261][ C0] __kmem_cache_alloc_node+0x207/0x2a0 [ 61.021559][ C0] __kmalloc+0xa3/0x1e0 [ 61.025548][ C0] hci_alloc_dev_priv+0x27/0x1c00 [ 61.030410][ C0] hci_uart_tty_ioctl+0x401/0xa70 [ 61.035269][ C0] tty_ioctl+0x903/0xc50 [ 61.039348][ C0] __se_sys_ioctl+0x114/0x190 [ 61.043865][ C0] __x64_sys_ioctl+0x7b/0x90 [ 61.048292][ C0] x64_sys_call+0x98/0x9a0 [ 61.052542][ C0] page last free stack trace: [ 61.057060][ C0] free_unref_page_prepare+0x9f1/0xa00 [ 61.062351][ C0] free_unref_page+0xb2/0x5c0 [ 61.066865][ C0] __free_pages+0x61/0xf0 [ 61.071027][ C0] __free_slab+0xce/0x1a0 [ 61.075194][ C0] __unfreeze_partials+0x165/0x1a0 [ 61.080142][ C0] put_cpu_partial+0xa9/0x100 [ 61.084658][ C0] __slab_free+0x1c8/0x280 [ 61.088908][ C0] ___cache_free+0xc6/0xd0 [ 61.093169][ C0] qlist_free_all+0xc5/0x140 [ 61.097587][ C0] kasan_quarantine_reduce+0x15a/0x180 [ 61.102881][ C0] __kasan_slab_alloc+0x24/0x80 [ 61.107568][ C0] slab_post_alloc_hook+0x53/0x2c0 [ 61.112519][ C0] kmem_cache_alloc+0x175/0x320 [ 61.117201][ C0] getname_flags+0xba/0x520 [ 61.121543][ C0] getname+0x19/0x20 [ 61.125274][ C0] do_sys_openat2+0xe0/0x870 [ 61.129707][ C0] [ 61.131871][ C0] Memory state around the buggy address: [ 61.137345][ C0] ffff888113d54900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.145241][ C0] ffff888113d54980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.153136][ C0] >ffff888113d54a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.161034][ C0] ^ [ 61.164941][ C0] ffff888113d54a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.172840][ C0] ffff888113d54b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.180738][ C0] ================================================================== [ 61.188631][ C0] Disabling lock debugging due to kernel taint [ 61.194698][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 61.194833][ T323] Bluetooth: hci4: command 0x1003 tx timeout [ 61.206338][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 61.206355][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 6.1.124-syzkaller-00008-gccc915784332 #0 [ 61.212224][ T315] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.220412][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 61.220426][ C0] RIP: 0010:__queue_work+0x4f1/0xd70 [ 61.252080][ C0] Code: 39 03 0f 84 40 01 00 00 e8 5c 6c 2a 00 4c 89 e7 e8 64 49 d7 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 70 09 72 00 49 8b 3e e8 18 42 d7 [ 61.271519][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 61.277421][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff8701d580 [ 61.285232][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 61.293063][ C0] RBP: ffffc90000007d00 R08: ffffffff814b261b R09: 0000000000000007 [ 61.300859][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888113d549c8 [ 61.308667][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888113d549e0 [ 61.316477][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 61.325419][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.331845][ C0] CR2: 00007ffe676e81e8 CR3: 00000001233ce000 CR4: 00000000003506b0 [ 61.339658][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.347462][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.355278][ C0] Call Trace: [ 61.358398][ C0] [ 61.361090][ C0] ? __die_body+0x62/0xb0 [ 61.365256][ C0] ? die_addr+0x9f/0xd0 [ 61.369245][ C0] ? exc_general_protection+0x317/0x4c0 [ 61.374638][ C0] ? asm_exc_general_protection+0x27/0x30 [ 61.380189][ C0] ? __queue_work+0x28b/0xd70 [ 61.384700][ C0] ? __queue_work+0x4f1/0xd70 [ 61.389214][ C0] ? __queue_work+0x29c/0xd70 [ 61.393726][ C0] delayed_work_timer_fn+0x61/0x80 [ 61.398672][ C0] ? queue_work_node+0x1d0/0x1d0 [ 61.403442][ C0] call_timer_fn+0x3b/0x2d0 [ 61.407783][ C0] ? queue_work_node+0x1d0/0x1d0 [ 61.412558][ C0] __run_timers+0x756/0xa10 [ 61.416899][ C0] ? calc_index+0x270/0x270 [ 61.421247][ C0] ? sched_clock+0x9/0x10 [ 61.425401][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 61.430093][ C0] run_timer_softirq+0x69/0xf0 [ 61.434702][ C0] handle_softirqs+0x1db/0x650 [ 61.439287][ C0] ? irqtime_account_irq+0xdc/0x260 [ 61.444331][ C0] __irq_exit_rcu+0x52/0xf0 [ 61.448673][ C0] irq_exit_rcu+0x9/0x10 [ 61.452750][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 61.458210][ C0] [ 61.460982][ C0] [ 61.463760][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 61.469577][ C0] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 61.474995][ C0] Code: 89 de 48 83 e6 08 31 ff e8 e7 46 53 fc 48 83 e3 08 0f 85 b1 00 00 00 0f 1f 44 00 00 e8 93 42 53 fc 0f 00 2d cc 12 ce 00 fb f4 e9 e3 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 61.494489][ C0] RSP: 0018:ffffffff87007bd0 EFLAGS: 000002d3 [ 61.500389][ C0] RAX: ffffffff8522522d RBX: 0000000000000000 RCX: ffffffff8701d580 [ 61.508287][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.516099][ C0] RBP: ffffffff87007c10 R08: ffffffff85225219 R09: fffffbfff0e03ab1 [ 61.523947][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 61.531721][ C0] R13: ffff888109ecc804 R14: dffffc0000000000 R15: ffff888109a57864 [ 61.539536][ C0] ? acpi_idle_enter+0x3f9/0x760 [ 61.544307][ C0] ? acpi_idle_enter+0x40d/0x760 [ 61.549082][ C0] ? intel_idle_xstate+0xa0/0xa0 [ 61.553861][ C0] cpuidle_enter_state+0x5eb/0x17f0 [ 61.558895][ C0] ? cpuidle_enter_s2idle+0x600/0x600 [ 61.564112][ C0] ? menu_enable_device+0x380/0x380 [ 61.569138][ C0] ? __sched_text_start+0x8/0x8 [ 61.573820][ C0] cpuidle_enter+0x5f/0xa0 [ 61.578071][ C0] do_idle+0x3d1/0x580 [ 61.581973][ C0] ? irqentry_exit+0x37/0x40 [ 61.586404][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 61.591435][ C0] ? schedule_idle+0x5b/0x90 [ 61.595871][ C0] ? do_idle+0x572/0x580 [ 61.599938][ C0] cpu_startup_entry+0x44/0x60 [ 61.604540][ C0] rest_init+0x10b/0x130 [ 61.608616][ C0] ? time_init+0x38/0x38 [ 61.612699][ C0] arch_call_rest_init+0xe/0xe [ 61.617298][ C0] start_kernel+0x46c/0x4d8 [ 61.621637][ C0] x86_64_start_reservations+0x2a/0x2c [ 61.627018][ C0] x86_64_start_kernel+0x7c/0x81 [ 61.631794][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 61.637523][ C0] [ 61.640385][ C0] Modules linked in: [ 61.644129][ C0] ---[ end trace 0000000000000000 ]--- [ 61.649413][ C0] RIP: 0010:__queue_work+0x4f1/0xd70 [ 61.654531][ C0] Code: 39 03 0f 84 40 01 00 00 e8 5c 6c 2a 00 4c 89 e7 e8 64 49 d7 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 70 09 72 00 49 8b 3e e8 18 42 d7 [ 61.673973][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 61.679874][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff8701d580 [ 61.687686][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 61.695496][ C0] RBP: ffffc90000007d00 R08: ffffffff814b261b R09: 0000000000000007 [ 61.703307][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888113d549c8 [ 61.711121][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888113d549e0 [ 61.718930][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 61.727698][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.734118][ C0] CR2: 00007ffe676e81e8 CR3: 00000001233ce000 CR4: 00000000003506b0 [ 61.741937][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.749744][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.757556][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 61.764709][ C0] Kernel Offset: disabled [ 61.768753][ C0] Rebooting in 86400 seconds.. [pid 421] ioctl(4, HCISETLINKPOL